Add IBM Tivoli Storage Manager Fastback Denial of Service module

[wwebb-r7]

This module triggers the denial of service condition detailed at https://www.exploit-db.com/exploits/38979/

[wchen-r7]

Rescuing ::Exception is not a recommended practice. Your module would catch things that should not be handled by it (for example, exceptions that should be handled by msfconsole). You want to be more specific :-)

I once tried to document what the Tcp mixin might raise in here, feel free to check it out:
https://github.com/rapid7/metasploit-framework/wiki/How-to-use-the-Msf%3A%3AExploit%3A%3ARemote%3A%3ATcp-mixin

[wchen-r7]

Hi @wwebb-r7, sorry we didn't make this clear. At Metasploit, all exploit modules are required to pop a shell. If it doesn't (in this case, looks like just a DoS), then you would have to move this module to the auxiliary category. In your case, probably in https://github.com/rapid7/metasploit-framework/tree/master/modules/auxiliary/dos/misc. You may browse around for code examples :-)

[wwebb-r7]

Made exception handling changes and moved module to module/auxiliary/dos/misc

[wchen-r7]

Thanks.

[wwebb-r7]

Inherit from Msf::Auxiliary

[wchen-r7]

Tested on version 6.1.4000:

msf auxiliary(ibm_tsm_dos) > run

[*] Connected to: 172.16.23.157 port: 11460
[*] Sending malicious packet
[*] Packet sent!
[*] Auxiliary module execution completed
msf auxiliary(ibm_tsm_dos) > rerun
[*] Reloading module...

[*] Exploit failed: Rex::ConnectionRefused The connection was refused by the remote host (172.16.23.157:11460).
[*] Auxiliary module execution completed
msf auxiliary(ibm_tsm_dos) > 

[wchen-r7]

PR merged. Congrats! :-)