Bluekeep-Metasploit-Lab-Project

Exploiting BlueKeep (CVE-2019-0708) on Windows 7

Objective

Gain remote access to an unpatched Windows 7 system via the BlueKeep RDP vulnerability using Metasploit.

Lab Setup

• Attacker: Kali Linux
• Target: Windows 7 (Unpatched, RDP Enabled)
• Network: NAT / Host-Only

Tools Used

• Metasploit Framework
• Kali Linux
• Windows 7

Exploitation Process

Phase 1: Recon & Setup

• Launch Metasploit
• Search BlueKeep module
• Configure RHOSTS and RDP settings

Phase 2: Payloads Used

1. Reverse Shell

• Payload: windows/x64/shell_reverse_tcp
• Result: Command shell access

2. VNC Injection