mubix/q — pull request #10 by ringt (2013-09-19 21:29:22+00:00)
Title: Module for fingerprinting web enabled embedded devices and smartly trying default user/pass

Add module for automagically fingerprinting http interfaces (usually to embedded devices), using the fingerprint to select default userids/passwords, and if i have enough info, try them.

This module has existed in various incarnations for years and a very early version was sent to the dev mailing list before the public redmine was available (and well before git). Essentially the project is too big for just me to maintain, though I do so in spurts as needed, and will never really be 'finished' For this reason, it will likely never make it in to the main metasploit tree.

It could potentially replace alot of specialized metasploit modules dedicated to specific devices.

Adding fingerprints/devices/users to try is as simple (usually) as updating the wordlists under data/wordlists

There are a few hundred things in there and have had pretty blistering success with it over the years. Hopefully you or someone else finds it interesting.