eternalblue-ms17-010-research

💀 EternalBlue（MS17-010）エクスプロイト研究 CVE-2017-0144の制御された再現 ― WannaCryランサムウェアの原因となったSMB脆弱性 ⚠️ 免責事項：この研究は、完全に隔離された制御されたラボ環境で、学術および教育目的のみのために実施されました。本番システムは一切関与していません。 概要 本プロジェクトは、サンドボックス化されたAWS EC2環境でEternalBlueエクスプロイト（CVE-2017-0144、CVSS...

From-EternalBlue-to-CVE-2025-2776-The-Evolution-of-an-SMB-Attack

EternalBlueからCVE-2025-2776へ：SMB攻撃の進化 2017年に世界を震撼させた攻撃は、今日のCVE‑2025‑2776へと進化しました。Microsoftは今もSMBv1に依存しており、この記事では、攻撃者が単純なDLLから完全なリバースシェルスタックへと攻撃チェーンをどのように改良してきたのか、そしてそれが防御側にとって何を意味するのかを説明します。 簡単な歴史の振り返り...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Google Android

This repository is a proof-of-concept PoC exploit for CVE-2017-0474. The exploit targets a vulnerability in the Windows SMBv1 protocol, which allows an attacker to execute arbitrary code on a vulnerable system. The exploit is written in Python and uses the Metasploit framework to deliver the...

CVE-2020-1301 Windows SMB Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 SMBv1 server handles certain requests, aka ‘Windows SMB Remote Code Execution Vulnerability’. Recent assessments: gwillcox-r7 at June 10, 2020 12:14am UTC reported: To add to @busterb’s assessment,...

Petya Ransomware Spreading Rapidly Worldwide, Just Like WannaCry

Watch out, readers! It is ransomware, another WannaCry, another wide-spread attack. The WannaCry ransomware is not dead yet and another large scale ransomware attack is making chaos worldwide, shutting down computers at corporates, power supplies, and banks across Russia, Ukraine, Spain, France,...

CVE-2017-0280

The Microsoft Server Message Block 1.0 SMBv1 allows denial of service when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability". This CVE ID is unique from CVE-2017-0269 and CVE-2017-0273...

CVE-2017-0273

The Microsoft Server Message Block 1.0 SMBv1 allows denial of service when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability". This CVE ID is unique from CVE-2017-0269 and CVE-2017-0280...

MS16-114: Security update for Windows SMBv1 Server: September 13, 2016

Resolves a vulnerability in Windows that could allow remote code execution if an authenticated attacker sends specially crafted packets to an affected Microsoft Server Message Block 1.0 SMBv1 Server.SummaryThis security update resolves a vulnerability in Microsoft Windows. On Windows Vista, Windo...

MS16-114: Security Update for Windows SMBv1 Server (3185879)

The remote Windows host is missing a security update. It is, therefore, affected by a remote code execution vulnerability in the Microsoft Server Message Block 1.0 SMBv1 Server due to improper handling of certain requests. An authenticated, remote attacker can exploit this, via specially crafted...