一组用于检测和演示ICMP时间戳信息泄露漏洞(CVE-1999-0524)的脚本。
这些工具发送精心构造的ICMP Type 13(时间戳请求)数据包,并分析响应以提取远程系统时间信息。
nping(推荐)和 hping3(Bash)ICMP-Timestamp.ps1 — PowerShell(Windows)icmp_timestamp_scanner.sh — Bash(Linux)nping(来自Nmap)在 PATH 中扫描单个目标
.\ICMP-Timestamp.ps1 -Targets "example.com"
扫描多个目标(逗号分隔)
.\ICMP-Timestamp.ps1 -Targets "example.com","192.168.1.1","target.domain.com"
从文件读取目标进行扫描
.\ICMP-Timestamp.ps1 -TargetFile "targets.txt"
跳过ping测试以加速扫描
.\ICMP-Timestamp.ps1 -TargetFile "targets.txt" -SkipPingTest
自定义超时时间(毫秒)
.\ICMP-Timestamp.ps1 -TargetFile "targets.txt" -TimeoutMs 5000
nping 或 hping3sudo 权限(发送ICMP所需)赋予执行权限
chmod +x icmp_timestamp_scanner.sh
扫描单个目标
sudo ./icmp_timestamp_scanner.sh -i example.com
扫描多个目标(逗号分隔)
sudo ./icmp_timestamp_scanner.sh -l "example.com,192.168.1.1,target.domain.com"
sudo ./icmp_timestamp_scanner.sh -f targets.txt
sudo ./icmp_timestamp_scanner.sh -f targets.txt
跳过ping测试(更快)
sudo ./icmp_timestamp_scanner.sh -f targets.txt -p
使用hping3替代nping
sudo ./icmp_timestamp_scanner.sh -f targets.txt -t hping3
自定义超时时间(秒)
sudo ./icmp_timestamp_scanner.sh -f targets.txt -w 5
##🖨️ 示例输出
#################################################
# CVE-1999-0524 - Remote Date Disclosure #
# Multi-Target Enhanced Version #
#################################################
Starting scan of 3 targets...
Processing target: example.com
Host is online
[RESULT] VULNERABLE to CVE-1999-0524
Disclosed remote time: 2023-10-15T07:28:28.065Z
Timestamps - Originate: 0, Receive: 26908065, Transmit: 26908065
Processing target: 192.168.1.1
Host is offline or not responding
Processing target: target.domain.com
Host is online
[RESULT] Not vulnerable to CVE-1999-0524
The target is not disclosing system time via ICMP timestamps
Scan completed.