CVE-2017-0148

This Metasploit module exploits the DOUBLEPULSAR implant (CVE-2017-0148) to execute payloads or neutralize the implant on vulnerable SMB servers. It leverages the ETERNALBLUE exploit chain to achieve remote code execution on Windows systems.

This Metasploit module scans for the MS17-010 vulnerability (CVE-2017-0147) by checking the SMB response status for FID 0. It does not exploit the vulnerability but detects its presence.

This is a Python-based exploit for CVE-2017-0148 (MS17-010), targeting a buffer overflow in the SMBv1 protocol. It leverages a crafted SMB packet to achieve remote code execution on vulnerable Windows systems.

The repository contains a Ruby script for the Metasploit Framework that scans for the MS17-010 (EternalBlue) vulnerability by checking the SMB response status. It does not include exploit code but detects vulnerability via STATUS_INSUFF_SERVER_RESOURCES.

This Metasploit module exploits the DOUBLEPULSAR implant for SMB, allowing remote code execution on systems already compromised by the implant. It includes functionality to detect the implant, execute payloads, and neutralize the implant.

This Metasploit module detects the presence of the MS17-010 vulnerability (CVE-2017-0148) by probing the SMB service for a specific response indicating the absence of the patch. It also checks for DoublePulsar infections on vulnerable hosts.