CVE-2017-0144 (EternalBlue) SMB
MS17-010 SMB Vulnerability (EternalBlue)
This vulnerability affects multiple versions of Windows:
- Windows Vista
- Windows 7
- Windows Server 2008
- Windows 8.1
- Windows Server 2012
- Windows 10
- Windows Server 2016
To scan for eternal blue vulnerability
Using MSF modules:
auxiliary/scanner/smb/smb_ms17_010
- first create a stageless shell using ./shell_prep.sh in /shellcode
- run netcat on the provided port
- then run the
eternalblue_exploit<windows version>.py script
MSF module to exploit:
exploit/windows/smb/ms17_010_eternalblue