> For the complete documentation index, see [llms.txt](https://wiki.smhuda.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://wiki.smhuda.com/vulnerability-wiki/infrastructure-level/icmp-timestamp-request-remote-date-disclosure.md).

# ICMP Timestamp Request Remote Date Disclosure

The **ICMP Timestamp Request Remote Date Disclosure** vulnerability occurs when an attacker is able to send an ICMP (Internet Control Message Protocol) timestamp request to a target system, which then responds with the system's timestamp information. This can expose the exact time of the target system.

ICMP is a protocol used for network error messages and diagnostics (e.g., "ping" commands). The vulnerability specifically affects ICMP timestamp requests (type 13) and responses (type 14), which can inadvertently reveal sensitive system information like the current date and time.

**Severity Rating**: Low

***

If the target is an IP and the pipeline returned nothing, remove the filtering and error suppression:

```
sudo hping3 --icmp-ts -c 3 -V -n <TARGET_IP>
```

Also cross-check with Nmap, forcing an IP-level timestamp probe:

```
sudo nmap -sn -PP --send-ip --reason --packet-trace -n <TARGET_IP>
```

Look specifically for:

```
Timestamp reply (type=14/code=0)
```

Use this single macOS command. Replace the final IP address with the authorized target:

```
sudo python3 -c 'import socket,struct,time,os,sys; dst=sys.argv[1]; ident=os.getpid()&65535; now=int((time.time()%86400)*1000); p=struct.pack("!BBHHHIII",13,0,0,ident,1,now,0,0); total=sum((p[i]<<8)+p[i+1] for i in range(0,len(p),2)); total=(total&65535)+(total>>16); total=(total&65535)+(total>>16); chk=(~total)&65535; p=struct.pack("!BBHHHIII",13,0,chk,ident,1,now,0,0); s=socket.socket(socket.AF_INET,socket.SOCK_RAW,socket.IPPROTO_ICMP); s.settimeout(5); s.sendto(p,(dst,0)); d,a=s.recvfrom(65535); h=(d[0]&15)*4; typ,code,cs,rid,seq,o,r,t=struct.unpack("!BBHHHIII",d[h:h+20]); print(f"{a[0]}: ICMP Type {typ}; Receive={r} ms; Transmit={t} ms ({t//3600000%24:02d}:{t//60000%60:02d}:{t//1000%60:02d}.{t%1000:03d} UTC)")' <TARGET_IP>
```

Successful output will look like:

```
192.0.2.10: ICMP Type 14; Receive=53240123 ms; Transmit=53240123 ms (14:47:20.123 UTC)
```
