Exploitation active confirmée

Ajoutée au catalogue CISA KEV le 10/02/2022, correctif exigé avant le 10/08/2022 pour les agences fédérales américaines.

Action requise : Apply updates per vendor instructions.

Description officielle (NVD)

The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets.

Preuves de concept publiques (26)

Dépôts tiers non vérifiés, parfois piégés. Ne les exécutez jamais en production : uniquement dans un environnement de test isolé.

peterpt/eternal_scanner · ★ 339 · 16/07/2017
An internet scanner for exploit CVE-2017-0144 (Eternal Blue) & CVE-2017-0145 (Eternal Romance)
EEsshq/CVE-2017-0144---EtneralBlue-MS17-010-Remote-Code-Execution · ★ 18 · 22/03/2021
AdityaBhatt3010/VAPT-Report-on-SMB-Exploitation-in-Windows-10-Finance-Endpoint · ★ 15 · 10/07/2025
This report outlines a structured VAPT engagement focusing on PCI DSS compliance, SMB service enumeration, and exploitation of CVE-2017-0144 (EternalBlue) on a Windows 10 machine within a finance-orie
AtithKhawas/autoblue · ★ 5 · 30/12/2024
AutoBlue - Automated EternalBlue (CVE-2017-0144 / MS17-010) exploitation tool leveraging Nmap and Metasploit for ethical hacking, penetration testing, and CTF challenges. Strictly for authorized and e
0xBlackash/CVE-2017-0144 · ★ 3 · 14/06/2026
CVE-2017-0144
sethwhy/BlueDoor · ★ 2 · 21/12/2024
Can you exploit the EternalBlue vulnerability (CVE-2017-0144) on a Windows 7 system and retrieve the hidden flag? Your goal is to gain administrative privileges and locate the flag stored behind the w
kimocoder/eternalblue · ★ 1 · 02/06/2019
CVE-2017-0144
MedX267/EternalBlue-Vulnerability-Scanner · ★ 1 · 03/02/2025
This script checks for devices vulnerable to the EternalBlue exploit (CVE-2017-0144) in a network using SMB.
FireTemple/Blackash-CVE-2017-0144 · ★ 1 · 27/11/2025
CVE-2017-0144
quincyomoruyi6-lang/BLUE-WRITEUP-CVE-2017-0144 · ★ 1 · 10/09/2026
Conducted a complete security assessment of an unpatched Windows 7 target ("Blue") to demonstrate the impact of legacy service vulnerabilities in an enterprise environment