See #782. Updating ipidseq to use capture_sendto.
git-svn-id: file:///home/svn/framework3/trunk@8263 4d416f70-5f16-0410-b530-b9f4589650daunstable
parent
99f9cf76a8
commit
4374b8ccc4
|
@ -64,35 +64,29 @@ class Metasploit3 < Msf::Auxiliary
|
||||||
end
|
end
|
||||||
|
|
||||||
def run_host(ip)
|
def run_host(ip)
|
||||||
|
open_pcap
|
||||||
|
|
||||||
raise "Pcaprub is not available" if not @@havepcap
|
raise "Pcaprub is not available" if not @@havepcap
|
||||||
raise "SAMPLES option must be >= 2" if datastore['SAMPLES'] < 2
|
raise "SAMPLES option must be >= 2" if datastore['SAMPLES'] < 2
|
||||||
|
|
||||||
pcap = open_pcap
|
pcap = self.capture
|
||||||
|
|
||||||
shost = Rex::Socket.source_address(ip)
|
shost = Rex::Socket.source_address(ip)
|
||||||
dst_mac,src_mac = lookup_eth(ip)
|
|
||||||
if dst_mac == "ff:ff:ff:ff:ff:ff"
|
|
||||||
print_error("#{ip}: Not reponding to ARP.")
|
|
||||||
return
|
|
||||||
end
|
|
||||||
|
|
||||||
to = (datastore['TIMEOUT'] || 500).to_f / 1000.0
|
to = (datastore['TIMEOUT'] || 500).to_f / 1000.0
|
||||||
|
|
||||||
ipids = []
|
ipids = []
|
||||||
|
|
||||||
self.capture.setfilter(getfilter(shost, ip, rport))
|
pcap.setfilter(getfilter(shost, ip, rport))
|
||||||
|
|
||||||
datastore['SAMPLES'].times do
|
datastore['SAMPLES'].times do
|
||||||
sport = rand(0xffff - 1025) + 1025
|
sport = rand(0xffff - 1025) + 1025
|
||||||
|
|
||||||
probe = buildprobe(shost, sport, ip, rport)
|
probe = buildprobe(shost, sport, ip, rport)
|
||||||
|
|
||||||
inject_eth(:payload => probe,
|
capture_sendto(probe, ip)
|
||||||
:eth_daddr => dst_mac,
|
|
||||||
:eth_saddr => src_mac
|
|
||||||
)
|
|
||||||
|
|
||||||
reply = probereply(self.capture, to)
|
reply = probereply(pcap, to)
|
||||||
|
|
||||||
next if not reply
|
next if not reply
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue