{"id":4907,"date":"2018-02-07T00:21:00","date_gmt":"2018-02-06T23:21:00","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=4907"},"modified":"2022-04-06T01:12:18","modified_gmt":"2022-04-05T23:12:18","slug":"nsa-exploits-adapted-for-all-windows-versions","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2018\/02\/07\/nsa-exploits-adapted-for-all-windows-versions\/","title":{"rendered":"NSA exploits adapted for all Windows versions"},"content":{"rendered":"

[German<\/a>]Last year, hackers from Shadow Brokers made various NSA tools public. Exploits such as EternalBlue were used in Ransomware attacks such as WannaCry, NotPetya and Bad Rabbit. A security researcher has now taken a closer look at other exploits and has been able to modify them so that they can run on all versions of Windows.<\/p>\n

<\/p>\n

In addition to the EternalBlue exploits, other exploits have been released. Here's the list:<\/p>\n

EternalBlue: <\/strong>Adressiert in MS17-010<\/a>
EmeraldThread<\/strong>: Adressiert in MS10-061<\/u><\/a>
EternalChampion<\/strong>; Adressiert in  CVE-2017-0146<\/u><\/a> & CVE-2017-0147<\/u><\/a>
ErraticGopher: <\/strong>vor der Freigabe von Windows Vista adressiert
EsikmoRoll: <\/strong>Adressiert in MS14-068<\/a>
EternalRomance<\/strong>: Adressiert in MS17-010<\/a>
EducatedScholar<\/strong>: Adressiert in MS09-050<\/a>
EternalSynergy<\/strong>: Adressiert in MS17-010<\/a>
EclipsedWing: <\/strong>Adressiert in MS08-067<\/a> <\/p>\n

These exploits take advantage of vulnerabilities in Windows, but only worked for certain versions. Now, RiskSense security researcher Sean Dillon (@zerosum0x0x0x0<\/a>) has modified the source code for some of these lesser-known exploits to work on a variety of Windows operating systems and run system-level code.<\/p>\n

The researcher has recently integrated these modified versions of EternalChampion, EternalRomance and EternalSynergy into the Metasploit Framework, an open source penetration testing project on GitHub<\/a>. He posted this message on Twitter.<\/p>\n

\n

MS17-010 #EternalSynergy<\/a> #EternalRomance<\/a> #EternalChampion<\/a> exploit and auxiliary modules for @Metasploit<\/a>. Support for Windows 2000 through 2016. I basically bolted MSF psexec onto @sleepya_<\/a> zzz_exploit. https:\/\/t.co\/UnGA1u4gWe<\/a> pic.twitter.com\/Y9SMFJguH1<\/a><\/p>\n

\u2014 z\u01dd\u0279osum0x0 (@zerosum0x0) 29. Januar 2018<\/a><\/p><\/blockquote>\n