Exploiting Unpatched Systems with EternalBlue

=============================================

This article will walk you through using EternalBlue to exploit an unpatched version of Windows 7 running in a controlled environment. Please note that these techniques should only be used for educational purposes and may not work against production systems.

Prerequisites

----------

* A Kali Linux machine with Metasploit installed.

* Docker, Flatpak, or other package managers depending on your distribution (optional).

Exploiting the Target System

----------------------------

Firstly, ensure that you have EternalBlue available in your Metasploit framework. You can obtain it by running `searchpwn eternalblue` within a terminal window.

Next, identify and note down the IP address of your target machine. Then, run the following command to start an Eternal Blue exploit against the vulnerable system:

```

msf auxiliary(exploit/windows/eternal/smb_double_pivot_rce) -r

```

Once successful exploitation has occurred, you should see a Meterpreter session open up on your Kali machine.

Initial Exploitation Steps

--------------------------

After gaining an initial foothold on the target system, it is crucial to maintain persistence. To achieve this:

1. Switch to a more stable user account with elevated privileges.

2. Use tools like `smbclient` or `samba-client` to map your attacking machine's S Shares onto the compromised host.

Exploiting via SMB Share

----------------------

Once you have established an initial foothold, it is essential to escalate your privileges further by gaining access to sensitive areas of the system:

1. Use tools like `searchsploit` or search for vulnerable applications within Metaspuides to identify exploitable targets.

2. Once a suitable target has been identified, use tools such as `smbclient`, `dcerun`, or other related utilities to execute arbitrary code with elevated privileges.

Exploiting via Meterpreter

-------------------------

Once you have gained an initial foothed onto the system using Metasploit's meterpreter module:

1. Use commands like `meterprilage -u ` followed by your desired privilege level (`user`, `root`) to escalate your privileges further.

2. Once elevated, use tools such as Meterp or other post-exploitation frameworks available within the meterpreter shell to maintain persistence and pivot laterally throughout the network.

-------

In conclusion, this article has covered how you can exploit unpatched systems using EternalBlue from a Kali Linux machine running Metasploit. Remember that these techniques should only be used for educational purposes against non-production environments due to potential security risks if applied in production settings without proper permission and oversight.

Run john the ripper on windows