From-EternalBlue-to-CVE-2025-2776-The-Evolution-of-an-SMB-Attack

De-EternalBlue-a-CVE-2025-2776-La-Evolucion-de-un-Ataque-SMB Conmocionó al mundo en 2017 y ha evolucionado hasta el CVE‑2025‑2776 actual. Microsoft sigue confiando en SMBv1; este artículo explicará cómo los atacantes han ajustado la cadena desde un simple DLL hasta una pila completa de...

eternalblue-ms17-010-research

💀 EternalBlue MS17-010 Exploitation Research Controlled reproduction of CVE-2017-0144 — the SMB vulnerability behind the WannaCry ransomware outbreak ⚠️ Disclaimer: This research was conducted in a fully isolated, controlled lab environment for academic and educational purposes only. No production...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Google Android

This repository is a proof-of-concept PoC exploit for CVE-2017-0474. The exploit targets a vulnerability in the Windows SMBv1 protocol, which allows an attacker to execute arbitrary code on a vulnerable system. The exploit is written in Python and uses the Metasploit framework to deliver the...

CVE-2020-1301 Windows SMB Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 SMBv1 server handles certain requests, aka ‘Windows SMB Remote Code Execution Vulnerability’. Recent assessments: gwillcox-r7 at June 10, 2020 12:14am UTC reported: To add to @busterb’s assessment,...

Petya Ransomware Spreading Rapidly Worldwide, Just Like WannaCry

Watch out, readers! It is ransomware, another WannaCry, another wide-spread attack. The WannaCry ransomware is not dead yet and another large scale ransomware attack is making chaos worldwide, shutting down computers at corporates, power supplies, and banks across Russia, Ukraine, Spain, France,...

CVE-2017-0280

The Microsoft Server Message Block 1.0 SMBv1 allows denial of service when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability". This CVE ID is unique from CVE-2017-0269 and CVE-2017-0273...

CVE-2017-0273

The Microsoft Server Message Block 1.0 SMBv1 allows denial of service when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability". This CVE ID is unique from CVE-2017-0269 and CVE-2017-0280...

MS16-114: Security update for Windows SMBv1 Server: September 13, 2016

Resolves a vulnerability in Windows that could allow remote code execution if an authenticated attacker sends specially crafted packets to an affected Microsoft Server Message Block 1.0 SMBv1 Server.SummaryThis security update resolves a vulnerability in Microsoft Windows. On Windows Vista, Windo...

MS16-114: Security Update for Windows SMBv1 Server (3185879)

The remote Windows host is missing a security update. It is, therefore, affected by a remote code execution vulnerability in the Microsoft Server Message Block 1.0 SMBv1 Server due to improper handling of certain requests. An authenticated, remote attacker can exploit this, via specially crafted...