We’re going to load another auxiliary module that will check for the vulnerability
for us.
Example 6-6. Scanning a target for MS17-010
msf auxiliary
(
scanner/smb/smb_enumshares
)
> use auxiliary/scanner/smb/smb_ms17_010
msf auxiliary
(
scanner/smb/smb_ms17_010
)
>
show options
Module options
(
auxiliary/scanner/smb/smb_ms17_010
)
:
Name Current Setting Required Description
---- --------------- -------- -----------
CHECK_ARCH
true
yes
Check
for
architecture
on vulnerable hosts
CHECK_DOPU
true
yes Check
for
DOUBLEPULSAR on vulnerable hosts
RHOSTS yes The target address range or CIDR identifier
RPORT
445
yes The SMB service port
(
TCP
)
SMBDomain . no
The Windows domain to use
