Blue#
Overview#
- OS: Windows
- IP: 10.10.10.40
- Difficulty: Easy
- Platform: HackTheBox
- OSCP: No
- Lists: N/A
Summary#
smb 2.1.0 vulnerability / Eternal Blue.
Enumeration#
I started broad, validated each finding, and then focused only on paths that were reproducible.
nmap scan results
Vulnerabilities#
port 445 / tcp
smb 2.1.0 windows 7
https://www.rapid7.com/db/modules/exploit/windows/smb/ms17_010_eternalblue/
Exploitation#
using the smb 2.1.0 vulnerability eternal blue that we found earlier
we got in , now time to grab our flags
pwned