• To get target IP

Nmap

Discovering ports

sudo nmap -T4 -p- 192.168.92.129 -v

Enumerating specific ports

nmap -T4 -p 135,139,445,49152-49157 -A 192.168.92.129 -v

Looking for exploits

Search on google “Windows 7 Ultimate 7601 exploit”

• Automated: https://www.rapid7.com/db/modules/exploit/windows/smb/ms17_010_eternalblue/
• Manual
  • https://www.exploit-db.com/exploits/42315 (Gets tricky and not enough documentation)
  • https://github.com/3ndG4me/AutoBlue-MS17-010 (Good documentation)

Enumeration

SMB

Exploiting

• Exploiting via Metasploit (automated)
• Exploiting via a pythong exploit (manual)