ICMP Timestamp Information Disclosure Scanner (CVE-1999-0524)

A set of scripts to detect and demonstrate the ICMP Timestamp Information Disclosure vulnerability (CVE-1999-0524).
These tools send crafted ICMP Type 13 (Timestamp Request) packets and analyze responses to extract remote system time information.

⚙️ Features

• Multi-target scanning (single target, comma-separated lists, or file input)
• Supports nping (recommended) and hping3 (Bash)
• Optional connectivity (ping) check before scanning
• Color-coded, human-readable output with timestamp breakdowns
• Manual timestamp input/analysis support
• Cross-platform: PowerShell (Windows) and Bash (Linux)

🧾 Files

• ICMP-Timestamp.ps1 — PowerShell (Windows)
• icmp_timestamp_scanner.sh — Bash (Linux)

✅ Requirements

Windows (PowerShell)

• PowerShell 4.0+
• nping (from Nmap) in PATH
• Administrative privileges (required to send raw ICMP)

Scan a single target

.\ICMP-Timestamp.ps1 -Targets "example.com"

Scan multiple targets (comma-separated)

.\ICMP-Timestamp.ps1 -Targets "example.com","192.168.1.1","target.domain.com"

Scan targets from a file

.\ICMP-Timestamp.ps1 -TargetFile "targets.txt"

Skip ping test for faster scanning

.\ICMP-Timestamp.ps1 -TargetFile "targets.txt" -SkipPingTest

Custom timeout (milliseconds)

.\ICMP-Timestamp.ps1 -TargetFile "targets.txt" -TimeoutMs 5000

Linux (Bash)

• Bash shell
• nping or hping3
• sudo privileges (to send ICMP)

Make executable

chmod +x icmp_timestamp_scanner.sh

Scan single target sudo ./icmp_timestamp_scanner.sh -i example.com

Scan multiple targets (comma-separated) sudo ./icmp_timestamp_scanner.sh -l "example.com,192.168.1.1,target.domain.com"

sudo ./icmp_timestamp_scanner.sh -f targets.txt sudo ./icmp_timestamp_scanner.sh -f targets.txt

Skip ping test (faster)

sudo ./icmp_timestamp_scanner.sh -f targets.txt -p

Use hping3 instead of nping

sudo ./icmp_timestamp_scanner.sh -f targets.txt -t hping3

Custom timeout (seconds)

sudo ./icmp_timestamp_scanner.sh -f targets.txt -w 5

##🖨️ Example Output

#################################################
#     CVE-1999-0524 - Remote Date Disclosure    #
#          Multi-Target Enhanced Version        #
#################################################

Starting scan of 3 targets...

Processing target: example.com
  Host is online
  [RESULT] VULNERABLE to CVE-1999-0524
  Disclosed remote time: 2023-10-15T07:28:28.065Z
  Timestamps - Originate: 0, Receive: 26908065, Transmit: 26908065

Processing target: 192.168.1.1
  Host is offline or not responding

Processing target: target.domain.com
  Host is online
  [RESULT] Not vulnerable to CVE-1999-0524
  The target is not disclosing system time via ICMP timestamps

Scan completed.