Exploiting a Vulnerable Windows 7 Machine Using EternalBlue (MS17–010)

Introduction

As part of my penetration testing practice, I tested a vulnerable Windows 7 machine using Kali Linux. The goal was to identify open services, check for vulnerabilities, and see if the system could be exploited.

Since Windows 7 no longer receives security updates, it remains vulnerable to many known attacks. In this lab, I successfully exploited the MS17–010 (EternalBlue) vulnerability using the Metasploit Framework.

Lab Setup

• Attacker: Kali Linux
• Target: Windows 7
• Tools Used: Nmap and Metasploit

Step 1 : Scanning the Target

I started by scanning the target using Nmap to discover open ports and running services.

The scan showed that the SMB service was running, which is commonly targeted on older Windows systems.

Step 2 : Selecting the Exploit

Since the target was running Windows 7, I used the MS17–010 (EternalBlue) exploit available in Metasploit.

This exploit targets a known vulnerability in the SMB service.

Step 3 : Configuring the Target

Before running the exploit, I set the RHOSTS value to the IP address of the Windows 7 machine.

After confirming the settings, the exploit was ready to run.

Step 4 : Running the Exploit

I launched the exploit using Metasploit.

Access Successful

The attack was successful, and I gained remote access to the Windows 7 machine.

Why It Worked

The attack succeeded because:

• Windows 7 was outdated.
• The MS17–010 vulnerability was not patched.
• SMB was exposed on the network.

This shows why outdated systems can become easy targets.

Recommendations

To protect against this type of attack:

• Upgrade to a supported version of Windows.
• Apply security updates regularly.
• Disable SMBv1 if it is not needed.
• Use a firewall to limit SMB access.
• Perform regular vulnerability scans

Conclusion

This lab showed how an unpatched Windows 7 machine can be compromised using the EternalBlue vulnerability. It also highlighted the importance of keeping systems updated and regularly checking for security weaknesses.

Even a simple vulnerability can lead to full system access if basic security practices are ignored.