CVE-2017-0143 PoC — Microsoft Windows SMB 输入验证错误漏洞

介绍

##Exploiting CVE-2017-0143 - EternalBlue Vulnerability

📌 Description
This project demonstrates how to exploit the CVE-2017-0143 vulnerability (EternalBlue) in a controlled environment for educational and penetration testing purposes. The attack was performed on a Windows 7 system using Metasploit Framework.

🔍 About CVE-2017-0143
CVE-2017-0143 is a critical vulnerability in the SMBv1 protocol on Windows systems. It allows remote attackers to execute arbitrary code via specially crafted packets, leading to remote code execution (RCE). This vulnerability was part of the EternalBlue exploit leaked by Shadow Brokers in 2017.

Type: Remote Code Execution

Affected systems: Windows XP, Vista, 7, Server 2008, etc.

CVSS Score: 9.8 (Critical)

🛠 Tools Used
Kali Linux (as the attacker machine)

Metasploit Framework

Windows 7 (victim machine, vulnerable)

VirtualBox / VMware (for virtualization)

文件快照

备注