+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Eternal blue not working (same network) (/showthread.php?tid=5646472)
Eternal blue not working (same network) - Blackshield_real - Jun 14, 2017
I'm getting positive results from auxiliary scanner that victim is vulnerable and NMAP says port 445 is open. I cannot ping the victim though idk for what reason now. I'm using this elevenPaths version "https://github.com/ElevenPaths/Eternalblue-Doublepulsar-Metasploit"
Can anyone help? got an updated version??
* - Golden_Receiver - Jun 14, 2017
Pretty sure they patched Eternal Blue like a week after the UK Hospital scandal and the WannaCry breakout.
* - Qismon - Sep 4, 2017
Yeah its patched but there are still plenty more out there that are vulnerable. Anyone interested let me know, I have a special exploit kit for this. 🤝
* - Hyrax - Sep 4, 2017
One of the NMAP scripts is a SMB exploit checker (not sure the actual name), but it will check to see if the host is actually vulnerable (Metasploit has a module to do this as well). Also, afaik most public version of the exploit have limited platforms for which they work (Windows 7 and Windows Server 2008 last I used it), so you might want to check that as well.
* - THC - Sep 4, 2017
Unless you know for sure that the OS that your target is using is vulnerable, it is very safe to assume that they are running a version of windows that has been patched.
* - Qismon - Sep 22, 2017
(Sep 4, 2017 11:13 PM)M.D. Wrote: Unless you know for sure that the OS that your target is using is vulnerable, it is very safe to assume that they are running a version of windows that has been patched.
Still plenty more out there and the Metasploit Scan module is good but limited.
After you find a vulnerable machine you still need to verify the SMB pipe names.
* - hi_man - Sep 22, 2017
I guess it is Patched for most of the Systems.
But yes, Many are vulnerable yet.
Try with official Metasploit Eternal blue. May that works.
It is working for me and may it also works for you too.