cve/2017/CVE-2017-7494.md

CVE-2017-7494

Description

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.

POC

Reference

• https://www.exploit-db.com/exploits/42060/
• https://www.exploit-db.com/exploits/42084/

Github

• https://github.com/00mjk/exploit-CVE-2017-7494
• https://github.com/0xMrNiko/Awesome-Red-Teaming
• https://github.com/0xh4di/awesome-pentest
• https://github.com/0xm4ud/noSAMBAnoCRY-CVE-2017-7494
• https://github.com/0xp4nda/awesome-pentest
• https://github.com/20142995/sectool
• https://github.com/5l1v3r1/0rion-Framework
• https://github.com/6point6/vulnerable-docker-launcher
• https://github.com/AK-blank/pocSearch
• https://github.com/ARPSyndicate/cvemon
• https://github.com/Addho/test
• https://github.com/Al1ex/Awesome-Pentest
• https://github.com/Al1ex/LinuxEelvation
• https://github.com/Amar224/Pentest-Tools
• https://github.com/AnLoMinus/PenTest
• https://github.com/AnonVulc/Pentest-Tools
• https://github.com/Astrogeorgeonethree/Starred
• https://github.com/Astrogeorgeonethree/Starred2
• https://github.com/Atem1988/Starred
• https://github.com/BJ-PXD/Explotacion-de-Vulnerabiliddes-bee-box
• https://github.com/C0dak/linux-kernel-exploits
• https://github.com/C0dak/local-root-exploit-
• https://github.com/CVEDB/PoC-List
• https://github.com/CVEDB/awesome-cve-repo
• https://github.com/CVEDB/top
• https://github.com/Correia-jpv/fucking-awesome-pentest
• https://github.com/CrackerCat/myhktools
• https://github.com/CyberRide/hacking-tools
• https://github.com/De4dCr0w/Linux-kernel-EoP-exp
• https://github.com/Desm0ndChan/OSCP-cheatsheet
• https://github.com/Dionsyius/pentest
• https://github.com/Feng4/linux-kernel-exploits
• https://github.com/GBMluke/Web
• https://github.com/GhostTroops/TOP
• https://github.com/GhostTroops/myhktools
• https://github.com/GulIqbal87/Pentest
• https://github.com/H0j3n/EzpzCheatSheet
• https://github.com/H1CH444MREB0RN/PenTest-free-tools
• https://github.com/H4CK3RT3CH/Awesome-Pentest-Reference
• https://github.com/Hansindu-M/CVE-2017-7494_IT19115344
• https://github.com/Hemanthraju02/awesome-pentest
• https://github.com/I-Rinka/BIT-EternalBlue-for-macOS_Linux
• https://github.com/ImranTheThirdEye/AD-Pentesting-Tools
• https://github.com/JERRY123S/all-poc
• https://github.com/Jahismighty/pentest-apps
• https://github.com/Jason134526/Final-Project
• https://github.com/Jean-Francois-C/Boot2root-CTFs-Writeups
• https://github.com/JlSakuya/Linux-Privilege-Escalation-Exploits
• https://github.com/Jongtek-23/Notes---Linux-Exploitation---Exploitation-over-the-Network
• https://github.com/Kiosec/External-Enumeration
• https://github.com/Luizfsn/offensive-security-practices-cheatsheet
• https://github.com/Mehedi-Babu/pentest_tools_repo
• https://github.com/Micr067/linux-kernel-exploits
• https://github.com/Mohamed8Saw/awesome-pentest
• https://github.com/Montana/openshift-network-policies
• https://github.com/Mr-Cyb3rgh0st/Ethical-Hacking-Tutorials
• https://github.com/Muhammad-Hammad-Shafqat/awesome-pentest
• https://github.com/NCSU-DANCE-Research-Group/CDL
• https://github.com/NetW0rK1le3r/awesome-hacking-lists
• https://github.com/NhutMinh2801/CVE_2017_7494
• https://github.com/OshekharO/Penetration-Testing
• https://github.com/Ostorlab/KEV
• https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
• https://github.com/QChiLan/linux-exp
• https://github.com/R0B1NL1N/Linux-Kernal-Exploits-m-
• https://github.com/R0B1NL1N/Linux-Kernel-Exploites
• https://github.com/RyanNgCT/EH-Assignment
• https://github.com/S3cur3Th1sSh1t/Pentest-Tools
• https://github.com/Sanket-HP/Ethical-Hacking-Tutorial
• https://github.com/SecWiki/linux-kernel-exploits
• https://github.com/Sep0lkit/el5-ELS
• https://github.com/SexyBeast233/SecBooks
• https://github.com/Shadowshusky/linux-kernel-exploits
• https://github.com/Singlea-lyh/linux-kernel-exploits
• https://github.com/Snoopy-Sec/Localroot-ALL-CVE
• https://github.com/SofianeHamlaoui/SMB-Cheatsheet
• https://github.com/Soldie/Colection-pentest
• https://github.com/Soldie/awesome-pentest-listas
• https://github.com/Spiidey/useful-shit
• https://github.com/TalekarAkshay/Pentesting-Guide
• https://github.com/Threekiii/Awesome-Exploit
• https://github.com/Threekiii/Awesome-POC
• https://github.com/Threekiii/Vulhub-Reproduce
• https://github.com/Tiriel-Alyptus/Pentest
• https://github.com/UroBs17/hacking-tools
• https://github.com/VitthalS/N-W
• https://github.com/VoitenkoAN/13.1
• https://github.com/Waffles-2/SambaCry
• https://github.com/Waseem27-art/ART-TOOLKIT
• https://github.com/WhaleShark-Team/murasame
• https://github.com/YellowVeN0m/Pentesters-toolbox
• https://github.com/ZTK-009/linux-kernel-exploits
• https://github.com/Zer0d0y/Samba-CVE-2017-7494
• https://github.com/a-roshbaik/Linux-Privilege-Escalation-Exploits
• https://github.com/abhinavkakku/Ethical-Hacking-Tutorials
• https://github.com/acidonper/openshift4-advanced-cluster-security
• https://github.com/adjaliya/-CVE-2017-7494-Samba-Exploit-POC
• https://github.com/albinjoshy03/linux-kernel-exploits
• https://github.com/alian87/linux-kernel-exploits
• https://github.com/amaaledi/SNP_Project_Linux_Vulnerability_Exploit
• https://github.com/ambynotcoder/C-libraries
• https://github.com/amcai/myscan
• https://github.com/andaks1/ib01
• https://github.com/artyang/smbclient_cheatsheet
• https://github.com/ashueep/SMB-Exploit
• https://github.com/atesemre/PenetrationTestAwesomResources
• https://github.com/aymankhder/awesome-pentest
• https://github.com/bakery312/Vulhub-Reproduce
• https://github.com/bertvv/ansible-role-samba
• https://github.com/betab0t/cve-2017-7494
• https://github.com/bhadra9999/samba
• https://github.com/blackpars4x4/pentesting
• https://github.com/brianwrf/SambaHunter
• https://github.com/brimstone/damnvulnerable-sambacry
• https://github.com/caique-garbim/CVE-2017-7494_SambaCry
• https://github.com/casohub/multinmap
• https://github.com/chzerv/ansible-role-samba
• https://github.com/clout86/Navi
• https://github.com/clout86/the-read-team
• https://github.com/coffee727/linux-exp
• https://github.com/copperfieldd/linux-kernel-exploits
• https://github.com/cved-sources/cve-2017-7494
• https://github.com/cyberanand1337x/bug-bounty-2022
• https://github.com/cybercrazetech/Employee-walkthrough
• https://github.com/cyberharsh/Samba7494
• https://github.com/cyberwisec/pentest-tools
• https://github.com/d3fudd/CVE-2017-7494_SambaCry
• https://github.com/darkcatdark/awesome-pentest
• https://github.com/devhackrahul/Penetration-Testing-
• https://github.com/distance-vector/linux-kernel-exploits
• https://github.com/do0dl3/myhktools
• https://github.com/drerx/awesome-pentest
• https://github.com/ducducuc111/Awesome-pentest
• https://github.com/elinakrmova/RedTeam-Tools
• https://github.com/emtee40/win-pentest-tools
• https://github.com/enaqx/awesome-pentest
• https://github.com/eric-erki/awesome-pentest
• https://github.com/fei9747/LinuxEelvation
• https://github.com/feiteira2/Pentest-Tools
• https://github.com/fex01/ansible-openhabserver
• https://github.com/giuseppsss/sambacry-pw2
• https://github.com/h4x0r-dz/local-root-exploit-
• https://github.com/hack-parthsharma/Pentest-Tools
• https://github.com/hcasaes/penetration-testing-resources
• https://github.com/hegusung/netscan
• https://github.com/hktalent/TOP
• https://github.com/hktalent/bug-bounty
• https://github.com/hktalent/myhktools
• https://github.com/homjxi0e/CVE-2017-7494
• https://github.com/huangzhe312/pentest
• https://github.com/i-snoop-4-u/Refs
• https://github.com/iamramadhan/Awesome-Pentest
• https://github.com/iamramahibrah/awesome-penetest
• https://github.com/iandrade87br/OSCP
• https://github.com/iconx2020a/vulnerable-lab
• https://github.com/incredible1yu/CVE-2017-7494
• https://github.com/infosecmahi/AWeSome_Pentest
• https://github.com/infosecmahi/awesome-pentest
• https://github.com/iqrok/myhktools
• https://github.com/irgoncalves/smbclient_cheatsheet
• https://github.com/isnoop4u/Refs
• https://github.com/jared1981/More-Pentest-Tools
• https://github.com/jbmihoub/all-poc
• https://github.com/jklinges14/Cyber-Security-Final-Project
• https://github.com/john-80/cve-2017-7494
• https://github.com/joxeankoret/CVE-2017-7494
• https://github.com/justone0127/Red-Hat-Advanced-Cluster-Security-for-Kubernetes-Operator-Installation
• https://github.com/justone0127/Red-Hat-Cluster-Security-for-Kubernetes-Operator-Installation
• https://github.com/kdandy/pentest_tools
• https://github.com/khansiddique/VulnHub-Boot2root-CTFs-Writeups
• https://github.com/kinourik/hacking-tools
• https://github.com/kraloveckey/venom
• https://github.com/kumardineshwar/linux-kernel-exploits
• https://github.com/lexisrepo/External-Enumeration
• https://github.com/lnick2023/nicenice
• https://github.com/loadingbadbeat/Enumeration
• https://github.com/lolici123/ScriptsAndCommands
• https://github.com/m0mkris/linux-kernel-exploits
• https://github.com/m4udSec/noSAMBAnoCRY-CVE-2017-7494
• https://github.com/mahyarx/pentest-tools
• https://github.com/make0day/pentest
• https://github.com/mashihoor/awesome-pentest
• https://github.com/merlinepedra/Pentest-Tools
• https://github.com/merlinepedra25/Pentest-Tools
• https://github.com/merlinepedra25/Pentest-Tools-1
• https://github.com/mhshafqat3/awesome-pentest
• https://github.com/motikan2010/blog.motikan2010.com
• https://github.com/n3masyst/n3masyst
• https://github.com/nitishbadole/Pentest_Tools
• https://github.com/nitishbadole/oscp-note-2
• https://github.com/nixawk/labs
• https://github.com/noegythnibin/links
• https://github.com/odolezal/D-Link-DIR-655
• https://github.com/oneplus-x/Awesome-Pentest
• https://github.com/oneplus-x/MS17-010
• https://github.com/oneplus-x/jok3r
• https://github.com/oneplush/hacking_tutorials
• https://github.com/opsxcq/exploit-CVE-2017-7494
• https://github.com/ozkanbilge/Linux-Kernel-Exploits
• https://github.com/p00h00/linux-exploits
• https://github.com/pacopeng/paco-acs-demo
• https://github.com/password520/linux-kernel-exploits
• https://github.com/pathakabhi24/Pentest-Tools
• https://github.com/paulveillard/cybersecurity-penetration-testing
• https://github.com/personaone/OSCP
• https://github.com/pjgmonteiro/Pentest-tools
• https://github.com/promise2k/OSCP
• https://github.com/qazbnm456/awesome-cve-poc
• https://github.com/qiantu88/Linux--exp
• https://github.com/rakjong/LinuxElevation
• https://github.com/readloud/Awesome-Stars
• https://github.com/retr0-13/Pentest-Tools
• https://github.com/retr0-13/awesome-pentest-resource
• https://github.com/rikosintie/nmap-python
• https://github.com/rizemon/OSCP-PWK-Notes
• https://github.com/rmsbpro/rmsbpro
• https://github.com/roninAPT/pentest-kit
• https://github.com/rowbot1/network-pentest
• https://github.com/rsfl/supervuln
• https://github.com/sbeteta42/enum_scan
• https://github.com/schecthellraiser606/oscp_cheet
• https://github.com/seaunderwater/MHN-Honeypots
• https://github.com/severnake/Pentest-Tools
• https://github.com/severnake/awesome-pentest
• https://github.com/sgxguru/awesome-pentest
• https://github.com/shayezkarim/pentest
• https://github.com/skeeperloyaltie/network
• https://github.com/sol1-ansible/sol1-samba
• https://github.com/taielab/awesome-hacking-lists
• https://github.com/thanshurc/awesome-pentest
• https://github.com/the-aerospace-corporation/counter-reconnaissance-program
• https://github.com/theyoge/AD-Pentesting-Tools
• https://github.com/thisismegatron/pentest-playbook
• https://github.com/touchmycrazyredhat/myhktools
• https://github.com/trhacknon/myhktools
• https://github.com/tristan-spoerri/Penetration-Testing
• https://github.com/tunjing789/Employee-walkthrough
• https://github.com/twseptian/vulnerable-resource
• https://github.com/txuswashere/Cybersecurity-Handbooks
• https://github.com/txuswashere/Penetration-Testing
• https://github.com/val922/cyb3r53cur1ty
• https://github.com/valarauco/wannafind
• https://github.com/vladgh/ansible-collection-vladgh-samba
• https://github.com/vmmaltsev/13.1
• https://github.com/wanirauf/pentest
• https://github.com/watsoncoders/pablo_rotem_security
• https://github.com/wattson-coder/pablo_rotem_security
• https://github.com/weeka10/-hktalent-TOP
• https://github.com/wiiwu959/Pentest-Record
• https://github.com/x0xr00t/basic-pivoting-with-metasploit
• https://github.com/xbl2022/awesome-hacking-lists
• https://github.com/xbl3/awesome-cve-poc_qazbnm456
• https://github.com/xfinest/linux-kernel-exploits
• https://github.com/xssfile/linux-kernel-exploits
• https://github.com/xsudoxx/OSCP
• https://github.com/yige666/awesome-pentest
• https://github.com/yige666/linux-kernel-exploits
• https://github.com/yinyinmeimei/CVE-2017-7494-payload
• https://github.com/yinyinnnnn/CVE-2017-7494-payload
• https://github.com/yllnelaj/awesome-pentest
• https://github.com/zc-githubs/oscp
• https://github.com/zyjsuper/linux-kernel-exploits