eternalblue-ms17-010-research

💀 EternalBlue MS17-010 शोषण अनुसंधान CVE-2017-0144 का नियंत्रित पुनरुत्पादन — WannaCry ransomware प्रकोप के पीछे SMB कमजोरी ⚠️ अस्वीकरण: यह शोध पूरी तरह से पृथक, नियंत्रित प्रयोगशाला वातावरण में केवल शैक्षिक और शैक्षणिक उद्देश्यों के लिए आयोजित किया गया था। कोई उत्पादन प्रणाली शामिल नहीं थी। अवलोक...

From-EternalBlue-to-CVE-2025-2776-The-Evolution-of-an-SMB-Attack

एटरनलब्लू-से-CVE-2025-2776-तक-SMB-हमले-का-विकास इसने 2017 में दुनिया को हिलाकर रख दिया था और आज के CVE‑2025‑2776 में विकसित हो गया है। माइक्रोसॉफ्ट अभी भी SMBv1 पर निर्भर है, यह लेख बताएगा कि हमलावरों ने एक साधारण DLL से पूर्ण रिवर्स-शेल स्टैक तक की श्रृंखला को कैसे बदल दिया है, और इसका डिफेंडरों...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Google Android

This repository is a proof-of-concept PoC exploit for CVE-2017-0474. The exploit targets a vulnerability in the Windows SMBv1 protocol, which allows an attacker to execute arbitrary code on a vulnerable system. The exploit is written in Python and uses the Metasploit framework to deliver the...

CVE-2020-1301 Windows SMB Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 SMBv1 server handles certain requests, aka ‘Windows SMB Remote Code Execution Vulnerability’. Recent assessments: gwillcox-r7 at June 10, 2020 12:14am UTC reported: To add to @busterb’s assessment,...

Petya Ransomware Spreading Rapidly Worldwide, Just Like WannaCry

Watch out, readers! It is ransomware, another WannaCry, another wide-spread attack. The WannaCry ransomware is not dead yet and another large scale ransomware attack is making chaos worldwide, shutting down computers at corporates, power supplies, and banks across Russia, Ukraine, Spain, France,...

CVE-2017-0280

The Microsoft Server Message Block 1.0 SMBv1 allows denial of service when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability". This CVE ID is unique from CVE-2017-0269 and CVE-2017-0273...

CVE-2017-0273

The Microsoft Server Message Block 1.0 SMBv1 allows denial of service when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability". This CVE ID is unique from CVE-2017-0269 and CVE-2017-0280...

MS16-114: Security Update for Windows SMBv1 Server (3185879)

The remote Windows host is missing a security update. It is, therefore, affected by a remote code execution vulnerability in the Microsoft Server Message Block 1.0 SMBv1 Server due to improper handling of certain requests. An authenticated, remote attacker can exploit this, via specially crafted...

MS16-114: Security update for Windows SMBv1 Server: September 13, 2016

Resolves a vulnerability in Windows that could allow remote code execution if an authenticated attacker sends specially crafted packets to an affected Microsoft Server Message Block 1.0 SMBv1 Server.SummaryThis security update resolves a vulnerability in Microsoft Windows. On Windows Vista, Windo...