NetExec MS17-010 Check (EternalBlue)

Detect MS17-010 (EternalBlue) vulnerable hosts via the SMBv1 transaction probe. Safe scan only — exploitation is left to dedicated tooling.

Curated and verified by Ahmad Alawneh, penetration tester (OSCP+, CRTE) · Last updated April 10, 2026

Syntax

Angle-bracket tokens are placeholders — replace them with your target's values, or open this command in the app to fill them in and copy the result.

nxc smb <target> -u '' -p '' -M ms17-010

nxc smb 10.10.10.0/24 -u '' -p '' -M ms17-010

Enum4linux-ng SMB Enumeration Next generation enum4linux for SMB enumeration
Impacket lookupsid Brute-force the RID space against SAMR / LSARPC to enumerate domain users, groups, and…
Impacket NetView Enumerate logged-on users and sessions on remote hosts
Impacket SAMRDump Dump user accounts and group information via SAMR protocol
Impacket SMBClient Interactive SMB client written in pure Python. Drops you into a shell with shares, ls,…
NetExec enum_ca Module Discover Active Directory Certificate Services CA hosts on the network and grab basic CA…
NetExec Password Policy Enumerate Domain Password Policy
NetExec SMB Enumerate AV Enumerate installed antivirus and security products on remote hosts