module

NTP "NAK to the Future"

Try Surface Command
Back to search
Disclosed
N/A
Created
May 30, 2018

Description

Crypto-NAK packets can be used to cause ntpd to accept time from
unauthenticated ephemeral symmetric peers by bypassing the
authentication required to mobilize peer associations. This module
sends these Crypto-NAK packets in order to establish an association
between the target ntpd instance and the attacking client. The end goal
is to cause ntpd to declare the legitimate peers "false tickers" and
choose the attacking clients as the preferred peers, allowing
these peers to control time.

Authors

Matthew Van Gundy of Cisco ASIG
Jon Hart jon_hart@rapid7.com

References

Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':


    msf > use auxiliary/scanner/ntp/ntp_nak_to_the_future
    msf auxiliary(ntp_nak_to_the_future) > show actions
        ...actions...
    msf auxiliary(ntp_nak_to_the_future) > set ACTION < action-name >
    msf auxiliary(ntp_nak_to_the_future) > show options
        ...show and set options...
    msf auxiliary(ntp_nak_to_the_future) > run
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today