79 lines
1.8 KiB
Ruby
79 lines
1.8 KiB
Ruby
##
|
|
# This module requires Metasploit: http://metasploit.com/download
|
|
# Current source: https://github.com/rapid7/metasploit-framework
|
|
##
|
|
|
|
|
|
require 'msf/core'
|
|
|
|
class Metasploit3 < Msf::Auxiliary
|
|
|
|
include Msf::Exploit::Remote::SNMPClient
|
|
include Msf::Auxiliary::Report
|
|
include Msf::Auxiliary::Scanner
|
|
|
|
def initialize
|
|
super(
|
|
'Name' => 'AIX SNMP Scanner Auxiliary Module',
|
|
'Description' => 'AIX SNMP Scanner Auxiliary Module',
|
|
'Author' =>
|
|
[
|
|
'Ramon de C Valle',
|
|
'Adriano Lima <adriano[at]risesecurity.org>',
|
|
],
|
|
'License' => MSF_LICENSE
|
|
)
|
|
|
|
end
|
|
|
|
def run_host(ip)
|
|
begin
|
|
snmp = connect_snmp
|
|
|
|
value = snmp.get_value('sysDescr.0')
|
|
|
|
if value =~ /AIX/
|
|
value = value.split("\n")
|
|
description = value[0].strip
|
|
value = value[2].split(':')
|
|
|
|
value = value[1].strip
|
|
value = value.split('.')
|
|
|
|
value[0] = value[0].to_i
|
|
value[1] = value[1].to_i
|
|
value[2] = value[2].to_i
|
|
value[3] = value[3].to_i
|
|
|
|
version = "#{value[0]}.#{value[1]}.#{value[2]}.#{value[3]}"
|
|
|
|
report_note(
|
|
:host => ip,
|
|
:proto => 'udp',
|
|
:sname => 'snmp',
|
|
:port => datastore['RPORT'],
|
|
:type => 'AIX',
|
|
:data => version
|
|
)
|
|
|
|
status = "#{ip} (#{description}) is running: "
|
|
status << "IBM AIX Version #{value[0]}.#{value[1]}.#{value[3]} "
|
|
status << "(#{version})"
|
|
|
|
print_status(status)
|
|
end
|
|
|
|
# No need to make noise about timeouts
|
|
rescue ::Rex::ConnectionError, ::SNMP::RequestTimeout, ::SNMP::UnsupportedVersion
|
|
rescue ::Interrupt
|
|
raise $!
|
|
rescue Exception => e
|
|
print_error("#{ip} #{e.class}, #{e.message}")
|
|
ensure
|
|
disconnect_snmp
|
|
end
|
|
|
|
end
|
|
|
|
end
|