39 matches found
eternal_scanner
ETERNAL SCANNER 2.4 Eternal scanner is an network scanner for Eternal Blue exploit CVE-2017-0144 & Eternal Romance named pipe CVE-2017-0145 . Screenshots 2.2 Version New Implementations Eternal Romance Vulnerability check escan -er Escan Database Splited Results escan -l Video...
Vulnerability-Research-CVE-2017-0144
Vulnerability-Research-CVE-2017-0144 LAB: SMB 프로토콜 취약점을 이용한 Windows 운영체제 공격. I. 설명 이 실습에서는 두 대의 컴퓨터를 사용하여 Windows 운영체제의 SMB 프로토콜 취약점을 이용한 공격을 시뮬레이션합니다. 한 대는 Kali Linux 운영체제를 실행하며 공격자해커 역할을 합니다. 다른 한 대는 피해자victim 역할을 하는 컴퓨터입니다. 피해자 컴퓨터는 SMB 취약점이 있는 Windows 7 64비트 운영체제를 실행하고 있습니다. 이를 위해 Kali Linux...
eternal_scanner
ETERNAL SCANNER 2.4 Eternal Scanner는 Eternal Blue 익스플로잇 CVE-2017-0144 및 Eternal Romance named pipe CVE-2017-0145를 위한 네트워크 스캐너입니다. 스크린샷 2.2 버전 새로운 기능 Eternal Romance 취약점 확인 escan -er Escan 데이터베이스 분할 결과 escan -l 동영상...
SMB-Protocol-Vulnerability_CVE-2017-0144
LAB: SMBプロトコルの脆弱性を利用したWindows OS攻撃 1. 説明 2. 概要 3. 準備 4. 攻撃の実行 5. 防御方法 1. 説明 このラボでは、2台のコンピュータを使用して、Windows OSのSMBプロトコルの脆弱性を利用した攻撃をシミュレーションします。1台はKali Linux OSを実行し、攻撃者（ハッカー）の役割を担います。もう1台は被害者（victim）の役割を担うコンピュータです。被害者マシンはSMB脆弱性を含むWindows 7 64ビットOSを実行しています。これを行うために、Kali Linuxマシン上で EternalBlue...
VAPT-Report-on-SMB-Exploitation-in-Windows-10-Finance-Endpoint
VAPT Report on SMB Exploitation in Windows 10 Finance Endpoint This report outlines a structured VAPT engagement focusing on PCI DSS compliance, SMB service enumeration, and exploitation of CVE-2017-0144 EternalBlue on a Windows 10 machine within a finance-oriented infrastructure. 🔐 Introduction...
autoblue
AUTOBLUE: Automated EternalBlue Exploit Tool AUTOBLUE is an automation tool designed to exploit the EternalBlue vulnerability CVE-2017-0144 on Windows machines. The tool integrates the power of Nmap for vulnerability scanning and Metasploit's msfconsole for exploitation, enabling users to...
EternalBlue-Vulnerability-Scanner
EternalBlue Scanner SMB対応デバイスをスキャンしてEternalBlue脆弱性（CVE-2017-0144）を検出するPythonツールです。 このスクリプトは、SMB接続をテストすることで、ネットワーク内のデバイスがEternalBlueエクスプロイトに対して脆弱かどうかを確認します。 ⚡ 機能 ✅ IPアドレスのリストをスキャンして、SMBの脆弱性を確認します。 ✅ 対象マシンがEternalBlue（CVE-2017-0144）に対して脆弱かどうかを検出します。 ✅...
BlueDoor
BlueDoor CTF チャレンジ 概要 チャレンジ名 : BlueDoor CVE : CVE-2017-0144 EternalBlue 難易度 : 3/5 カテゴリ : エクスプロイト、Windows 作成者 : Seth Davis BlueDoor は、Windows 7 システムにおける実際の脆弱性 EternalBlue - CVE-2017-0144 をシミュレートします。目的は、脆弱性を悪用し、権限を昇格させ、隠されたフラグを取得することです。 要件 仮想マシンソフトウェア : VMware、VirtualBox、または同等のもの オペレーティングシステム :...
Eternal-Blue-CVE-2017-0144-THM-Write-Up
このリポジトリには README がありません。...
Detect-CVE-2017-0144-attack
CVE-2017-0144攻撃検出Pythonプログラム リアルタイムで継続的にネットワークトラフィックを監視・追跡するPythonプログラムです。CVE-2017-0144（EternalBlue）攻撃を検出した際にコンソール画面に警告を表示します。 1. ラボ構成 このラボはVMWare上の3台の仮想マシンで実施します。攻撃マシン1台（Kali Linux）、被害マシン1台（Windows 7 - 64bit SP1）、監視マシン1台（Windows 10）です。マシンは同一のネットワークカード（NAT）を使用し、相互にpingが通ることを確認します。いくつかの注意点：...
EternalBlue-MS17-010-Vulnerability
EternalBlue MS17-010 Vulnerability Analysis This repository...
Exploit for CVE-2017-0144
💀 EternalBlue MS17-010 Exploitation Research Controlled r...
CosmicBeetle Deploys Custom ScRansom Ransomware, Partnering with RansomHub
The threat actor known as CosmicBeetle has debuted a new custom ransomware strain called ScRansom in attacks targeting small- and medium-sized businesses SMBs in Europe, Asia, Africa, and South America, while also likely working as an affiliate for RansomHub. "CosmicBeetle replaced its previously...
noorfes.com Cross Site Scripting vulnerability OBB-1281479
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
uzagorju.com Cross Site Scripting vulnerability OBB-1226358
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Exploit for CVE-2017-0144
PoC exploit for CVE-2017-0144 Eternalblue-Doublepulsar. The target product/service is Windows operating system, specifically the SMB Server Message Block protocol. The vulnerability class/vector is a remote code execution RCE vulnerability, which allows an attacker to execute arbitrary code on th...
rch2000.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1099114 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting rch2000.com website and i...
url.hqhl.net Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1087920 Security Researcher g0bl1nsec Helped patch 3735 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting url.hqhl.net website and...
SMB DOUBLEPULSAR Remote Code Execution Exploit
This Metasploit module executes a Metasploit payload against the Equation Group's DOUBLEPULSAR implant for SMB as popularly deployed by ETERNALBLUE. While this module primarily performs code execution against the implant, the "Neutralize implant" target allows you to disable the implant. This...
SMB DOUBLEPULSAR Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SMB DOUBLEPULSAR Remote Code Execution', 'Description' = %q This module executes a Metasploit payload against the Equation Group's DOUBLEPULSAR...