Description
This module retrieves information from a Xymon daemon service (formerly Hobbit, based on Big Brother), including server configuration information, a list of monitored hosts, and associated client log for each host.
This module also retrieves usernames and password hashes from the `xymonpasswd` config file from Xymon servers before 4.3.25, which permit download arbitrary config files (CVE-2016-2055), and servers configured with `ALLOWALLCONFIGFILES` enabled.
Module options
To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':
msf > use auxiliary/gather/xymon/infomsf undefined(info) > show actions ...actions...msf undefined(info) > set ACTION < action-name >msf undefined(info) > show options ...show and set options...msf undefined(info) > runPrioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub