Exploit | Hack Window Server 2008 R2 Using Metasploit [Video]

What Is EternalBlue?

EternalBlue is an exploit most possibly developed via the NSA as a former zero-day. It was released in 2017 by way of the Shadow Brokers, a hacker group recognized for leaking tools and exploits used by the Equation Group, which has feasible ties to the Tailored Access Operations unit of the NSA.

EternalBlue also referred to as MS17-010, is a vulnerability in Microsoft's Server Message Block (SMB) protocol. SMB lets in systems to share get admission to files, printers, and other assets at the network. The vulnerability is authorized to occur because in advance versions of SMB contain a flaw that we could an attacker set up a null consultation connection via anonymous login. An attacker can then ship malformed packets and in the long run, execute arbitrary commands on the goal.

Exploit EternalBlue with Metasploit

We'll be using an unpatched replica of Windows Server 2008 R2 as the goal for the first phase of this tutorial. An evaluation reproduction can be downloaded from Microsoft so you can better observe along.