目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1359 元

100%

CVE-2017-0144 PoC — Microsoft Windows SMB 输入验证错误漏洞

来源
关联漏洞
标题: Microsoft Windows SMB 输入验证错误漏洞 (CVE-2017-0144)
Description:Microsoft Windows和Microsoft Windows Server都是美国微软(Microsoft)公司的产品。Microsoft Windows是一套个人设备使用的操作系统。Microsoft Windows Server是一套服务器操作系统。Server Message Block(SMB)Server是其中的一个为计算机提供身份验证用以访问服务器上打印机和文件系统的组件。 Microsoft Windows中的SMBv1服务器存在远程代码执行漏洞。远程攻击者可借助特制的数据包利用该
Description
This script checks for devices vulnerable to the EternalBlue exploit (CVE-2017-0144) in a network using SMB.
介绍

EternalBlue Scanner
A Python tool for scanning SMB-enabled devices for the EternalBlue vulnerability (CVE-2017-0144). This script checks whether devices in a network are vulnerable to the EternalBlue exploit by testing SMB connections.

Features
Scans a list of IP addresses for SMB vulnerability.
Detects if the target machine is vulnerable to EternalBlue (CVE-2017-0144).
Parallel processing for scanning multiple devices quickly using ThreadPoolExecutor.
Simple and easy-to-use interface.
Requirements
Python 3.x
impacket library
Installation
Clone this repository:

git clone https://github.com/MedX267/EternalBlue-Vulnerability-Scanner.git

cd EternalBlue-Scanner

Install dependencies:

pip install -r requirements.txt
If you don't have a requirements.txt file, you can manually install Impacket with:

pip install impacket

Usage
Run the script by providing a list of target IP addresses:

python eternalblue_scanner.py <target_ip_1> <target_ip_2> ... <target_ip_n>
Example:

python eternalblue_scanner.py 192.168.1.1 192.168.1.2 192.168.1.3
The script will then check each IP for the EternalBlue vulnerability and display the results.

Output
The script will output whether each target IP is vulnerable or not vulnerable to EternalBlue, and show a summary of the results.


[+] 192.168.1.1 is VULNERABLE to EternalBlue!
[-] 192.168.1.2 is NOT VULNERABLE to EternalBlue.
[-] 192.168.1.3 is not reachable.

License
This tool is provided as-is for educational and testing purposes. Use responsibly and ensure you have proper authorization before scanning networks or devices.

文件快照

登录后查看神龙缓存的 POC 文件快照

登录查看
备注
    1. 建议优先通过来源进行访问。
    2. 本地 POC 快照面向订阅用户开放;当原始来源失效或无法访问时,本地镜像作为订阅权益的一部分提供。
    3. 持续抓取、验证、维护这份 POC 档案需要不少投入,因此本地快照已纳入付费订阅。您的订阅是让这份资料能继续走下去的关键,由衷感谢。 查看订阅方案 →