UPNP + EternalBlue + Bluekeep| WTF u say

UPNP + EternalBlue + Bluekeep| WTF u say

[embed]UPnProxy: EternalSilence By, Chad Seaman Overview: UPnProxy is alive and well. There are 277,000 devices, out of a pool of 3.5 million, running…blogs.akamai.com

This work was originally inspired by this group of asshat’s pulling this off I had to know how it worked, So I made this tool and of course made it check eternal like them.

But I stepped it up a notch and made it so You can attack just the admin interface of the devices or you can go directly after the whole internal network. The tool intelligently grabs the routers internal Ip and can use that to generate a valid list of internal hosts and try to punch our way into port 445 SMB, as well as 3389 RDP to exploit Bluekeep via hidden dos to avoid skids. So take away this much if you run UPNP and my pos tool can connect to it I can port forward myself to the protected admin interface and exploit that with one of the million bugs in the world, or simply brute force or use default creds. Allot of time this could lead to en masse dns hijhacking as well

As possibly internal network breaches and pivots due to the fact we can instrument Eternal Blue and Bluekeep. I know you guys got the Blues not my problem anymore Patch your stuff, I waited long enough to release the UPNP part mostly cuz I suck and couldn’t get it right lol. Also I wanted to give a big period for people to Patch this UPNP vector as well as Eternal, than Bluekeep Jesus already the trifecta is complete. This is 100% a POC not intended for stable release if You like it show me where I f’d up. I am always trying to learn

This was a great experience for me to learn at least a piece of UPNP’s RFC

I present to you without further ADO for my new homie @gabsmash on twitter and the whole badassarmy for tolerating my shit posting.

Oh did I mention It talks As well ;)

Angel Gabriel

[embed]devcoinfet/AngelGabriel You can't perform that action at this time. You signed in with another tab or window. You signed out in another tab or…github.com

follow my rants on twitter

@Tomtom48450661