update for ntp modules

Author: jabra-

modules/auxiliary/scanner/ntp/ntp_monlist.rb

@@ -8,6 +8,7 @@
 class Metasploit3 < Msf::Auxiliary
 
   include Msf::Auxiliary::Report
+  include Msf::Exploit::Capture
   include Msf::Exploit::Remote::Udp
   include Msf::Auxiliary::UDPScanner
   include Msf::Auxiliary::NTP
@@ -48,7 +49,12 @@ def initialize
 
   # Called for each IP in the batch
   def scan_host(ip)
-    scanner_send(@probe, ip, datastore['RPORT'])
+    if spoofed?
+      datastore['ScannerRecvWindow'] = 0
+      scanner_spoof_send(@probe, ip, datastore['RPORT'], datastore['SRCIP'], datastore['NUM_REQUESTS'])
+    else
+      scanner_send(@probe, ip, datastore['RPORT'])
+    end
   end
 
   # Called for each response packet

modules/auxiliary/scanner/ntp/ntp_peer_list_dos.rb

@@ -8,6 +8,7 @@
 class Metasploit3 < Msf::Auxiliary
 
   include Msf::Auxiliary::Report
+  include Msf::Exploit::Capture
   include Msf::Exploit::Remote::Udp
   include Msf::Auxiliary::UDPScanner
   include Msf::Auxiliary::NTP
@@ -36,7 +37,12 @@ def initialize
 
   # Called for each IP in the batch
   def scan_host(ip)
-    scanner_send(@probe, ip, datastore['RPORT'])
+    if spoofed?
+      datastore['ScannerRecvWindow'] = 0
+      scanner_spoof_send(@probe, ip, datastore['RPORT'], datastore['SRCIP'], datastore['NUM_REQUESTS'])
+    else
+      scanner_send(@probe, ip, datastore['RPORT'])
+    end
   end
 
   # Called before the scan block

modules/auxiliary/scanner/ntp/ntp_peer_list_sum_dos.rb

@@ -8,6 +8,7 @@
 class Metasploit3 < Msf::Auxiliary
 
   include Msf::Auxiliary::Report
+  include Msf::Exploit::Capture
   include Msf::Exploit::Remote::Udp
   include Msf::Auxiliary::UDPScanner
   include Msf::Auxiliary::NTP
@@ -36,7 +37,12 @@ def initialize
 
   # Called for each IP in the batch
   def scan_host(ip)
-    scanner_send(@probe, ip, datastore['RPORT'])
+    if spoofed?
+      datastore['ScannerRecvWindow'] = 0
+      scanner_spoof_send(@probe, ip, datastore['RPORT'], datastore['SRCIP'], datastore['NUM_REQUESTS'])
+    else
+      scanner_send(@probe, ip, datastore['RPORT'])
+    end
   end
 
   # Called for each response packet

modules/auxiliary/scanner/ntp/ntp_req_nonce_dos.rb

@@ -8,6 +8,7 @@
 class Metasploit3 < Msf::Auxiliary
 
   include Msf::Auxiliary::Report
+  include Msf::Exploit::Capture
   include Msf::Exploit::Remote::Udp
   include Msf::Auxiliary::UDPScanner
   include Msf::Auxiliary::NTP
@@ -37,7 +38,12 @@ def initialize
 
   # Called for each IP in the batch
   def scan_host(ip)
-    scanner_send(@probe, ip, datastore['RPORT'])
+    if spoofed?
+      datastore['ScannerRecvWindow'] = 0
+      scanner_spoof_send(@probe, ip, datastore['RPORT'], datastore['SRCIP'], datastore['NUM_REQUESTS'])
+    else
+      scanner_send(@probe, ip, datastore['RPORT'])
+    end
   end
 
   # Called for each response packet

modules/auxiliary/scanner/ntp/ntp_reslist_dos.rb

@@ -8,6 +8,7 @@
 class Metasploit3 < Msf::Auxiliary
 
   include Msf::Auxiliary::Report
+  include Msf::Exploit::Capture
   include Msf::Exploit::Remote::Udp
   include Msf::Auxiliary::UDPScanner
   include Msf::Auxiliary::NTP
@@ -38,7 +39,12 @@ def initialize
 
   # Called for each IP in the batch
   def scan_host(ip)
-    scanner_send(@probe, ip, datastore['RPORT'])
+    if spoofed?
+      datastore['ScannerRecvWindow'] = 0
+      scanner_spoof_send(@probe, ip, datastore['RPORT'], datastore['SRCIP'], datastore['NUM_REQUESTS'])
+    else
+      scanner_send(@probe, ip, datastore['RPORT'])
+    end
   end
 
   # Called for each response packet

modules/auxiliary/scanner/ntp/ntp_unsettrap_dos.rb

@@ -8,6 +8,7 @@
 class Metasploit3 < Msf::Auxiliary
 
   include Msf::Auxiliary::Report
+  include Msf::Exploit::Capture
   include Msf::Exploit::Remote::Udp
   include Msf::Auxiliary::UDPScanner
   include Msf::Auxiliary::NTP
@@ -36,7 +37,12 @@ def initialize
 
   # Called for each IP in the batch
   def scan_host(ip)
-    scanner_send(@probe, ip, datastore['RPORT'])
+    if spoofed?
+      datastore['ScannerRecvWindow'] = 0
+      scanner_spoof_send(@probe, ip, datastore['RPORT'], datastore['SRCIP'], datastore['NUM_REQUESTS'])
+    else
+      scanner_send(@probe, ip, datastore['RPORT'])
+    end
   end
 
   # Called for each response packet