Skip to content

Instantly share code, notes, and snippets.

@grejh0t

grejh0t/nmap-cmdline

Forked from Neo23x0/nmap-cmdline
Created May 15, 2017 12:46
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save grejh0t/637be0f5dea474353f66b2a5505e3f2b to your computer and use it in GitHub Desktop.
Save grejh0t/637be0f5dea474353f66b2a5505e3f2b to your computer and use it in GitHub Desktop.
Download ZIP
Nmap Scan Params for CVE-2017-0143 MS17-010 Scanning
Raw
nmap-cmdline
# Scan for CVE-2017-0143 MS17-010
# The vulnerability used by WannaCry Ransomware
#
# 1. Use @calderpwn's script
# http://seclists.org/nmap-dev/2017/q2/79
#
# 2. Save it to Nmap NSE script directory
# Linux - /usr/share/nmap/scripts/ or /usr/local/share/nmap/scripts/
# OSX - /opt/local/share/nmap/scripts/
#
# Note:
# I had to use "--max-hostgroup 3", otherwise the script misses vulnerable hosts using nmap 7.30 on OS X
# Don't use "-T4", this also caused the script to miss vulnerable hosts
#
# Find a test range via ShodanHQ
# https://www.shodan.io/search?query=port%3A445+os%3A%22Windows+Server+2003%22
nmap -sC -p445 --open --max-hostgroup 3 --script smb-vuln-ms17-010.nse X.X.X.X/X
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment