CVE-2017-0147

This Metasploit module exploits SMB vulnerabilities in MS17-010 (CVE-2017-0147) to achieve remote code execution on Windows systems. It leverages a write-what-where primitive to overwrite session information and execute payloads via psexec, PowerShell, or native upload methods.

This Metasploit module scans for the MS17-010 vulnerability (CVE-2017-0147) by checking the SMB response status for FID 0. It does not exploit the vulnerability but detects its presence.

This is a Python-based exploit for CVE-2017-0148 (MS17-010), targeting a buffer overflow in the SMBv1 protocol. It leverages a crafted SMB packet to achieve remote code execution on vulnerable Windows systems.

The repository contains no exploit code or technical details, only a vague reference to a Microsoft Defender detection name. This appears to be a social engineering lure rather than a legitimate PoC.

This Metasploit module exploits the DOUBLEPULSAR implant (CVE-2017-0147) to execute payloads or neutralize the implant via SMB. It includes detection, payload execution, and implant neutralization capabilities.

This Metasploit module scans for the MS17-010 vulnerability by checking for the STATUS_INSUFF_SERVER_RESOURCES response and also detects DoublePulsar infections. It does not exploit the vulnerability but confirms its presence.

This Metasploit module exploits the DOUBLEPULSAR implant for SMB, allowing remote code execution on vulnerable Windows systems. It includes functionality to detect the implant, execute payloads, and neutralize the implant.

This is a functional Metasploit module for CVE-2017-0147 (ETERNALBLUE), exploiting a buffer overflow in SMBv1 via a kernel pool corruption vulnerability. It includes detailed exploit logic, payload handling, and target-specific configurations for various Windows versions.