1
##
2
# This module requires Metasploit: https://metasploit.com/download
3
# Current source: https://github.com/rapid7/metasploit-framework
4
##
5

6
class MetasploitModule < Msf::Auxiliary
7
  include Msf::Exploit::Remote::Tcp
8
  include Msf::Auxiliary::Scanner
9
  include Msf::Auxiliary::Report
10

11
  def initialize
12
    super(
13
      'Name' => 'EMC AlphaStor Device Manager Service',
14
      'Description' => 'This module queries the remote host for the EMC Alphastor Device Management Service.',
15
      'Author' => 'MC',
16
      'License' => MSF_LICENSE
17
    )
18

19
    register_options([Opt::RPORT(3000),])
20
  end
21

22
  def run_host(ip)
23
    connect
24

25
    pkt = "\x68" + Rex::Text.rand_text_alphanumeric(5) + "\x00" * 512
26

27
    sock.put(pkt)
28

29
    select(nil, nil, nil, 0.25)
30

31
    data = sock.get_once
32

33
    if (data and data =~ /rrobotd:rrobotd/)
34
      print_good("Host #{ip} is running the EMC AlphaStor Device Manager.")
35
      report_service(:host => rhost, :port => rport, :name => "emc-manager", :info => data)
36
    else
37
      print_error("Host #{ip} is not running the service...")
38
    end
39

40
    disconnect
41
  end
42
end
43

44