Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add modules for more NTP amplification attacks -- R7-2014-12 #3696

Merged
merged 12 commits into from Aug 25, 2014
Merged

Add modules for more NTP amplification attacks -- R7-2014-12 #3696

merged 12 commits into from Aug 25, 2014

Commits on Aug 9, 2014

  1. Initial commit of modules for NTP vulns described in R7-2014-12 

    Not entirely functional or polished, but mostly working
    @jhart-r7
    jhart-r7 committed Aug 9, 2014
    Copy the full SHA
    ed3ccdc View commit details
    Browse the repository at this point in the history

  2. Gut admin functions from R7-2014-12 NTP modules 

    None of these are admin modules.  All of that stuff should eventually go
in auxiliary/admin
    @jhart-r7
    jhart-r7 committed Aug 9, 2014
    Copy the full SHA
    00452b4 View commit details
    Browse the repository at this point in the history

  3. Return the NTP message, not the string

    @jhart-r7
    jhart-r7 committed Aug 9, 2014
    Copy the full SHA
    c48cf48 View commit details
    Browse the repository at this point in the history

  4. Add new mixin for helping to detect DRDoS vulns

    @jhart-r7
    jhart-r7 committed Aug 9, 2014
    Copy the full SHA
    ddcaa11 View commit details
    Browse the repository at this point in the history

  5. Update R7-2014-12 NTP modules to use new DRDoS mixin

    @jhart-r7
    jhart-r7 committed Aug 9, 2014
    Copy the full SHA
    a5e9abc View commit details
    Browse the repository at this point in the history

  6. Move rdoc for Msf::Auxiliary::DRDoS

    @jhart-r7
    jhart-r7 committed Aug 9, 2014
    Copy the full SHA
    d6198c7 View commit details
    Browse the repository at this point in the history

Commits on Aug 10, 2014

  1. Add rspec coverage for Msf::Auxiliary::DRDoS

    @jhart-r7
    jhart-r7 committed Aug 10, 2014
    Copy the full SHA
    8e626c1 View commit details
    Browse the repository at this point in the history

Commits on Aug 20, 2014

  1. Allow singular NTP version and mode 7 implementation testing

    @jhart-r7
    jhart-r7 committed Aug 20, 2014
    Copy the full SHA
    8fd4ee8 View commit details
    Browse the repository at this point in the history

  2. Update ntp_monlist to use UDPScanner, NTP and DRDoS mixins

    @jhart-r7
    jhart-r7 committed Aug 20, 2014
    Copy the full SHA
    7ad9300 View commit details
    Browse the repository at this point in the history

  3. Only discard monlist replies that are impossibly short 

    This fixes the case where if a monlist reply only includes one peer
    @jhart-r7
    jhart-r7 committed Aug 20, 2014
    Copy the full SHA
    758c3fa View commit details
    Browse the repository at this point in the history

  4. Store peer data note in the same format as originally

    @jhart-r7
    jhart-r7 committed Aug 20, 2014
    Copy the full SHA
    9db3dc7 View commit details
    Browse the repository at this point in the history

  5. If a peer is 127.0.0.1, don't try to store it because we (currently..… 

    ….) can't
    @jhart-r7
    jhart-r7 committed Aug 20, 2014
    Copy the full SHA
    9f9f28c View commit details
    Browse the repository at this point in the history