##
# This module requires Metasploit: http//metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##


require 'msf/core'

class Metasploit3 < Msf::Auxiliary

  include Msf::Exploit::Remote::SNMPClient
  include Msf::Auxiliary::Report
  include Msf::Auxiliary::Scanner

  def initialize
    super(
      'Name'        => 'AIX SNMP Scanner Auxiliary Module',
      'Description' => 'AIX SNMP Scanner Auxiliary Module',
      'Author'      =>
        [
          'Ramon de C Valle',
          'Adriano Lima <adriano[at]risesecurity.org>',
        ],
      'License'     => MSF_LICENSE
    )

  end

  def run_host(ip)
    begin
      snmp = connect_snmp

      value = snmp.get_value('sysDescr.0')

      if value =~ /AIX/
        value = value.split("\n")
        description = value[0].strip
        value = value[2].split(':')

        value = value[1].strip
        value = value.split('.')

        value[0] = value[0].to_i
        value[1] = value[1].to_i
        value[2] = value[2].to_i
        value[3] = value[3].to_i

        version = "#{value[0]}.#{value[1]}.#{value[2]}.#{value[3]}"

        report_note(
            :host   => ip,
            :proto => 'udp',
            :sname  => 'snmp',
            :port   => datastore['RPORT'],
            :type   => 'AIX',
            :data   => version
        )

        status = "#{ip} (#{description}) is running: "
        status << "IBM AIX Version #{value[0]}.#{value[1]}.#{value[3]} "
        status << "(#{version})"

        print_status(status)
      end

    # No need to make noise about timeouts
    rescue ::Rex::ConnectionError, ::SNMP::RequestTimeout, ::SNMP::UnsupportedVersion
    rescue ::Interrupt
      raise $!
    rescue Exception => e
      print_error("#{ip} #{e.class}, #{e.message}")
    ensure
      disconnect_snmp
    end

  end

end