NSA - MS17-010 - Revision history

Lphanvan: /* Executing the FuzzBunch */

2017-12-17T19:43:57Z

Executing the FuzzBunch

← Older revision		Revision as of 22:43, 17 December 2017
Line 72:		Line 72:
	[[File:Capture2.PNG]]		[[File:Capture2.PNG]]

	=== ~~Executing the~~ FuzzBunch ===		=== Execute FuzzBunch ===

	Now, we can execute again the command “python fb.py” and we should see that FUZZBUNCH is doing it		Now, we can execute again the command “python fb.py” and we should see that FUZZBUNCH is doing it

2017-12-17T19:43:10Z

← Older revision		Revision as of 22:43, 17 December 2017
Line 4:		Line 4:

	Video Proof: https://www.youtube.com/watch?v=6VWQcMP6v4w		Video Proof: https://www.youtube.com/watch?v=6VWQcMP6v4w

			Nb!!: For education purpose only

	=== Introduction ===		=== Introduction ===

2017-05-02T20:55:55Z

Microsoft Security Bulletin MS17-010 - NSA Tool leak

← Older revision		Revision as of 23:55, 2 May 2017
Line 3:		Line 3:
	Author: Ender Loc Phan		Author: Ender Loc Phan

	Video Proof:		Video Proof: https://www.youtube.com/watch?v=6VWQcMP6v4w

	=== Introduction ===		=== Introduction ===

2017-05-02T19:10:14Z

Why Eternalblue & DoublePulsar?

← Older revision		Revision as of 22:10, 2 May 2017
Line 18:		Line 18:

	=== Why Eternalblue & DoublePulsar? ===		=== Why Eternalblue & DoublePulsar? ===

			An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests. An attacker who successfully exploited this vulnerability could craft a special packet, which could lead to information disclosure from the server.
			To exploit the vulnerability, in most situations, an unauthenticated attacker could send a specially crafted packet to a targeted SMBv1 server.
			The security update addresses the vulnerability by correcting how SMBv1 handles these specially crafted requests.

	ETERNALBLUE is the only one that can be used to attacking Windows 7 and Windows Server 2008 without needing authentication. After that, we		ETERNALBLUE is the only one that can be used to attacking Windows 7 and Windows Server 2008 without needing authentication. After that, we

2017-04-30T17:11:02Z

Microsoft Security Bulletin MS17-010 - NSA Tool leak

2017-04-30T17:10:57Z

Microsoft Security Bulletin MS17-010 - NSA Tool leak

← Older revision		Revision as of 20:10, 30 April 2017
Line 1:		Line 1:
	== Microsoft Security Bulletin MS17-010 - NSA Tool leak ==		== Microsoft Security Bulletin MS17-010 - NSA Tool leak ==

			Author: Ender Loc Phan
			Video Proof:

	=== Introduction ===		=== Introduction ===

Line 156:		Line 160:

	'''WE WIN!!!!!!'''		'''WE WIN!!!!!!'''

	== Summary ==		== Summary ==

2017-04-30T17:10:09Z

Introduction

← Older revision		Revision as of 20:10, 30 April 2017
Line 9:		Line 9:

	Affected Software:		Affected Software:

			[[File:Capture17.PNG]]

	=== Why Eternalblue & DoublePulsar? ===		=== Why Eternalblue & DoublePulsar? ===

2017-04-30T17:09:53Z

Introduction

← Older revision		Revision as of 20:09, 30 April 2017
Line 7:		Line 7:
	DOUBLEPULSAR. To leverage these “fantastic” codes, we’ll be using FUZZBUNCH, The NSA’s		DOUBLEPULSAR. To leverage these “fantastic” codes, we’ll be using FUZZBUNCH, The NSA’s
	“Metasploit”		“Metasploit”

			Affected Software:

	=== Why Eternalblue & DoublePulsar? ===		=== Why Eternalblue & DoublePulsar? ===

2017-04-30T17:09:29Z

Summary

← Older revision		Revision as of 20:09, 30 April 2017
Line 157:		Line 157:
	Finally, we’ve obtained a Meterpreter shell on a Windows 7 SP1 x64 without needing for user		Finally, we’ve obtained a Meterpreter shell on a Windows 7 SP1 x64 without needing for user
	interaction, just with knowing its IP.		interaction, just with knowing its IP.

			Vulnerability detail:

			https://technet.microsoft.com/en-us/library/security/ms08-067.aspx

2017-04-30T17:07:43Z

Getting Empire session

← Older revision		Revision as of 20:07, 30 April 2017
Line 152:		Line 152:

	'''WE WIN!!!!!!'''		'''WE WIN!!!!!!'''
			== Summary ==


			Finally, we’ve obtained a Meterpreter shell on a Windows 7 SP1 x64 without needing for user
			interaction, just with knowing its IP.