1
##
2
# This module requires Metasploit: https://metasploit.com/download
3
# Current source: https://github.com/rapid7/metasploit-framework
4
##
5

6
class MetasploitModule < Msf::Auxiliary
7
  include Msf::Auxiliary::Report
8
  include Msf::Auxiliary::Scanner
9
  include Msf::Exploit::Remote::Udp
10

11
  def initialize(info = {})
12
    super(
13
      update_info(
14
        info,
15
        'Name' => 'Motorola Timbuktu Service Detection',
16
        'Description' => %q{
17
          This module simply sends a packet to the Motorola Timbuktu service for detection.
18
        },
19
        'Author' => ['MC'],
20
        'License' => MSF_LICENSE,
21
        'DisclosureDate' => '2009-09-25',
22
        'Notes' => {
23
          'Reliability' => UNKNOWN_RELIABILITY,
24
          'Stability' => UNKNOWN_STABILITY,
25
          'SideEffects' => UNKNOWN_SIDE_EFFECTS
26
        }
27
      )
28
    )
29

30
    register_options(
31
      [
32
        Opt::RPORT(407)
33
      ]
34
    )
35
  end
36

37
  def run_host(ip)
38
    begin
39
      connect_udp
40

41
      ping = "\x00\x25\x00\x22\xFF\x01\x00\x64\x03\x07\x00\x05\x00\x01\x00\x00"
42

43
      udp_sock.write(ping)
44

45
      res = udp_sock.read(256)
46

47
      if (res =~ /\x00\x25\xD0\xB9/)
48
        report_note(
49
          :host	=> ip,
50
          :proto	=> 'udp',
51
          :port	=> datastore['RPORT'],
52
          :type	=> 'SERVICE',
53
          :data	=> { :service => 'Motorola Timbuktu Service Detection' }
54
        )
55
        print_status("Motorola Timbuktu Detected on host #{ip}.")
56
      else
57
        print_error("Unable to determine info for #{ip}...")
58
      end
59
    ensure
60
      disconnect_udp
61
    end
62
  end
63
end
64

65