{"id":477119,"date":"2023-08-09T09:07:44","date_gmt":"2023-08-09T09:07:44","guid":{"rendered":""},"modified":"2023-09-05T11:14:03","modified_gmt":"2023-09-05T11:14:03","slug":"eternalblue","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/cn\/wiki\/eternalblue\/","title":{"rendered":"\u6c38\u6052\u4e4b\u84dd"},"content":{"rendered":"

EternalBlue \u662f\u4e00\u79cd\u81ed\u540d\u662d\u8457\u7684\u7f51\u7edc\u6b66\u5668\uff0c\u56e0\u5176\u5728 2017 \u5e74 5 \u6708\u6bc1\u706d\u6027\u7684 WannaCry \u52d2\u7d22\u8f6f\u4ef6\u653b\u51fb\u4e2d\u626e\u6f14\u7684\u89d2\u8272\u800c\u58f0\u540d\u72fc\u85c9\u3002EternalBlue \u7531\u7f8e\u56fd\u56fd\u5bb6\u5b89\u5168\u5c40 (NSA) \u5f00\u53d1\uff0c\u662f\u4e00\u79cd\u80fd\u591f\u9488\u5bf9 Microsoft Windows \u64cd\u4f5c\u7cfb\u7edf\u6f0f\u6d1e\u7684\u6f0f\u6d1e\u3002\u6b64\u6f0f\u6d1e\u5229\u7528\u4e86\u670d\u52a1\u5668\u6d88\u606f\u5757 (SMB) \u534f\u8bae\u4e2d\u7684\u7f3a\u9677\uff0c\u5141\u8bb8\u653b\u51fb\u8005\u65e0\u9700\u7528\u6237\u4ea4\u4e92\u5373\u53ef\u8fdc\u7a0b\u6267\u884c\u4efb\u610f\u4ee3\u7801\uff0c\u4f7f\u5176\u6210\u4e3a\u7f51\u7edc\u72af\u7f6a\u5206\u5b50\u624b\u4e2d\u7684\u4e00\u6b3e\u6781\u5176\u5371\u9669\u7684\u5de5\u5177\u3002<\/p>\n

EternalBlue \u7684\u8d77\u6e90\u5386\u53f2\u4ee5\u53ca\u9996\u6b21\u63d0\u53ca\u5b83<\/h2>\n

EternalBlue \u7684\u8d77\u6e90\u53ef\u4ee5\u8ffd\u6eaf\u5230\u7f8e\u56fd\u56fd\u5bb6\u5b89\u5168\u5c40\u7684\u5b9a\u5236\u8bbf\u95ee\u884c\u52a8 (TAO) \u90e8\u95e8\uff0c\u8be5\u90e8\u95e8\u8d1f\u8d23\u5236\u4f5c\u548c\u90e8\u7f72\u7528\u4e8e\u60c5\u62a5\u6536\u96c6\u548c\u95f4\u8c0d\u6d3b\u52a8\u7684\u590d\u6742\u7f51\u7edc\u6b66\u5668\u3002\u5b83\u6700\u521d\u662f\u4f5c\u4e3a\u7f8e\u56fd\u56fd\u5bb6\u5b89\u5168\u5c40\u7528\u4e8e\u6e17\u900f\u548c\u76d1\u89c6\u76ee\u6807\u7cfb\u7edf\u7684\u653b\u51fb\u5de5\u5177\u5e93\u7684\u4e00\u90e8\u5206\u800c\u521b\u5efa\u7684\u3002<\/p>\n

\u4ee4\u4eba\u9707\u60ca\u7684\u662f\uff0c\u4e00\u4e2a\u540d\u4e3a\u201c\u5f71\u5b50\u7ecf\u7eaa\u4eba\u201d\u7684\u7ec4\u7ec7\u4e8e 2016 \u5e74 8 \u6708\u6cc4\u9732\u4e86\u7f8e\u56fd\u56fd\u5bb6\u5b89\u5168\u5c40\u7684\u5927\u91cf\u9ed1\u5ba2\u5de5\u5177\u3002\u6cc4\u9732\u7684\u6863\u6848\u5305\u542b\u201c\u6c38\u6052\u4e4b\u84dd\u201d\u6f0f\u6d1e\u4ee5\u53ca\u5176\u4ed6\u5f3a\u5927\u7684\u5de5\u5177\uff0c\u4f8b\u5982 DoublePulsar\uff0c\u8fd9\u4e9b\u5de5\u5177\u5141\u8bb8\u672a\u7ecf\u6388\u6743\u8bbf\u95ee\u53d7\u611f\u67d3\u7684\u7cfb\u7edf\u3002\u8fd9\u662f\u201c\u6c38\u6052\u4e4b\u84dd\u201d\u9996\u6b21\u88ab\u516c\u5f00\u63d0\u53ca\uff0c\u4e3a\u7f51\u7edc\u72af\u7f6a\u5206\u5b50\u548c\u56fd\u5bb6\u652f\u6301\u7684\u884c\u4e3a\u8005\u5e7f\u6cdb\u800c\u6076\u610f\u5730\u4f7f\u7528\u5b83\u5960\u5b9a\u4e86\u57fa\u7840\u3002<\/p>\n

EternalBlue \u8be6\u7ec6\u4fe1\u606f\uff1a\u6269\u5c55\u4e3b\u9898<\/h2>\n

EternalBlue \u5229\u7528\u4e86 Windows \u64cd\u4f5c\u7cfb\u7edf\u4f7f\u7528\u7684 SMBv1 \u534f\u8bae\u4e2d\u7684\u6f0f\u6d1e\u3002SMB \u534f\u8bae\u652f\u6301\u8054\u7f51\u8ba1\u7b97\u673a\u4e4b\u95f4\u7684\u6587\u4ef6\u548c\u6253\u5370\u673a\u5171\u4eab\uff0c\u800c EternalBlue \u5229\u7528\u7684\u5177\u4f53\u6f0f\u6d1e\u5728\u4e8e SMB \u5904\u7406\u67d0\u4e9b\u6570\u636e\u5305\u7684\u65b9\u5f0f\u3002<\/p>\n

\u4e00\u65e6\u6210\u529f\u5229\u7528\uff0cEternalBlue \u53ef\u8ba9\u653b\u51fb\u8005\u5728\u6613\u53d7\u653b\u51fb\u7684\u7cfb\u7edf\u4e0a\u8fdc\u7a0b\u6267\u884c\u4ee3\u7801\uff0c\u4ece\u800c\u690d\u5165\u6076\u610f\u8f6f\u4ef6\u3001\u7a83\u53d6\u6570\u636e\u6216\u4e3a\u8fdb\u4e00\u6b65\u653b\u51fb\u5efa\u7acb\u7acb\u8db3\u70b9\u3002EternalBlue \u5982\u6b64\u5177\u6709\u7834\u574f\u6027\u7684\u539f\u56e0\u4e4b\u4e00\u662f\u5b83\u80fd\u591f\u5728\u7f51\u7edc\u4e2d\u5feb\u901f\u4f20\u64ad\uff0c\u4f7f\u5176\u6210\u4e3a\u4e00\u79cd\u8815\u866b\u822c\u7684\u5a01\u80c1\u3002<\/p>\n

EternalBlue \u7684\u5185\u90e8\u7ed3\u6784\uff1a\u5de5\u4f5c\u539f\u7406<\/h2>\n

EternalBlue \u7684\u6280\u672f\u8fd0\u4f5c\u975e\u5e38\u590d\u6742\uff0c\u6d89\u53ca\u591a\u4e2a\u5229\u7528\u9636\u6bb5\u3002\u653b\u51fb\u9996\u5148\u5411\u76ee\u6807\u7cfb\u7edf\u7684 SMBv1 \u670d\u52a1\u5668\u53d1\u9001\u4e00\u4e2a\u7279\u5236\u7684\u6570\u636e\u5305\u3002\u6b64\u6570\u636e\u5305\u6ea2\u51fa\u6613\u53d7\u653b\u51fb\u7cfb\u7edf\u7684\u5185\u6838\u6c60\uff0c\u5bfc\u81f4\u653b\u51fb\u8005\u7684 shellcode \u5728\u5185\u6838\u4e0a\u4e0b\u6587\u4e2d\u6267\u884c\u3002\u8fd9\u4f7f\u653b\u51fb\u8005\u80fd\u591f\u63a7\u5236\u53d7\u611f\u67d3\u7684\u7cfb\u7edf\u5e76\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002<\/p>\n

EternalBlue \u5229\u7528\u4e86\u4e00\u4e2a\u540d\u4e3a DoublePulsar \u7684\u9644\u52a0\u7ec4\u4ef6\uff0c\u8be5\u7ec4\u4ef6\u53ef\u5145\u5f53\u540e\u95e8\u690d\u5165\u3002\u4e00\u65e6\u76ee\u6807\u611f\u67d3\u4e86 EternalBlue\uff0c\u5c31\u4f1a\u90e8\u7f72 DoublePulsar \u4ee5\u4fdd\u6301\u6301\u4e45\u6027\u5e76\u4e3a\u672a\u6765\u7684\u653b\u51fb\u63d0\u4f9b\u9014\u5f84\u3002<\/p>\n

EternalBlue \u4e3b\u8981\u7279\u6027\u5206\u6790<\/h2>\n

\u4f7f\u5f97\u201c\u6c38\u6052\u4e4b\u84dd\u201d\u6210\u4e3a\u5982\u6b64\u5f3a\u5927\u7684\u7f51\u7edc\u6b66\u5668\u7684\u5173\u952e\u7279\u6027\u5305\u62ec\uff1a<\/p>\n

    \n
  1. \n

    \u8fdc\u7a0b\u4ee3\u7801\u6267\u884c<\/strong>\uff1aEternalBlue \u5141\u8bb8\u653b\u51fb\u8005\u5728\u6613\u53d7\u653b\u51fb\u7684\u7cfb\u7edf\u4e0a\u8fdc\u7a0b\u6267\u884c\u4ee3\u7801\uff0c\u4ece\u800c\u5b9e\u73b0\u5b8c\u5168\u63a7\u5236\u3002<\/p>\n<\/li>\n

  2. \n

    \u8815\u866b\u5f0f\u4f20\u64ad<\/strong>\uff1a\u5b83\u80fd\u591f\u5728\u7f51\u7edc\u4e0a\u81ea\u4e3b\u4f20\u64ad\uff0c\u4ece\u800c\u6210\u4e3a\u4e00\u79cd\u5371\u9669\u7684\u8815\u866b\uff0c\u6709\u52a9\u4e8e\u5feb\u901f\u611f\u67d3\u3002<\/p>\n<\/li>\n

  3. \n

    \u9690\u79d8\u800c\u6301\u4e45<\/strong>\uff1a\u5229\u7528 DoublePulsar \u7684\u540e\u95e8\u529f\u80fd\uff0c\u653b\u51fb\u8005\u53ef\u4ee5\u5728\u53d7\u611f\u67d3\u7684\u7cfb\u7edf\u4e2d\u957f\u671f\u5b58\u5728\u3002<\/p>\n<\/li>\n

  4. \n

    \u9488\u5bf9 Windows<\/strong>\uff1aEternalBlue \u4e3b\u8981\u9488\u5bf9 Windows \u64cd\u4f5c\u7cfb\u7edf\uff0c\u7279\u522b\u662f\u4fee\u590d\u8be5\u6f0f\u6d1e\u7684\u8865\u4e01\u4e4b\u524d\u7684\u7248\u672c\u3002<\/p>\n<\/li>\n<\/ol>\n

    \u5b58\u5728\u591a\u79cd\u7c7b\u578b\u7684 EternalBlue<\/h2>\n\n\n\n\n\n\n\n\n\n
    \u59d3\u540d<\/th>\n\u63cf\u8ff0<\/th>\n<\/tr>\n<\/thead>\n
    \u6c38\u6052\u4e4b\u84dd<\/td>\n\u5f71\u5b50\u7ecf\u7eaa\u4eba\u6cc4\u9732\u7684\u6f0f\u6d1e\u539f\u59cb\u7248\u672c\u3002<\/td>\n<\/tr>\n
    \u6c38\u6052\u7684\u6d6a\u6f2b<\/td>\n\u9488\u5bf9 SMBv1 \u7684\u76f8\u5173\u6f0f\u6d1e\u4e0e EternalBlue \u4e00\u8d77\u6cc4\u9732\u3002<\/td>\n<\/tr>\n
    \u6c38\u6052\u7684\u534f\u540c<\/td>\nShadow Brokers \u6cc4\u9732\u7684\u53e6\u4e00\u4e2a SMBv1 \u6f0f\u6d1e\u3002<\/td>\n<\/tr>\n
    \u6c38\u6052\u7684\u51a0\u519b<\/td>\n\u7528\u4e8eSMBv2\u8fdc\u7a0b\u5229\u7528\u7684\u5de5\u5177\uff0c\u5c5e\u4e8e\u6cc4\u9732\u7684NSA\u5de5\u5177\u7684\u4e00\u90e8\u5206\u3002<\/td>\n<\/tr>\n
    \u6c38\u6052\u84dd\u6279\u6b21<\/td>\n\u81ea\u52a8\u90e8\u7f72EternalBlue\u7684\u6279\u5904\u7406\u811a\u672c\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    EternalBlue \u7684\u4f7f\u7528\u65b9\u6cd5\u3001\u95ee\u9898\u53ca\u89e3\u51b3\u65b9\u6848<\/h2>\n

    EternalBlue \u4e3b\u8981\u7528\u4e8e\u6076\u610f\u76ee\u7684\uff0c\u5bfc\u81f4\u5927\u89c4\u6a21\u7f51\u7edc\u653b\u51fb\u548c\u6570\u636e\u6cc4\u9732\u3002\u5176\u4f7f\u7528\u65b9\u5f0f\u5305\u62ec\uff1a<\/p>\n

      \n
    1. \n

      \u52d2\u7d22\u8f6f\u4ef6\u653b\u51fb<\/strong>\uff1aEternalBlue \u5728 WannaCry \u548c NotPetya \u52d2\u7d22\u8f6f\u4ef6\u653b\u51fb\u4e2d\u626e\u6f14\u4e86\u6838\u5fc3\u89d2\u8272\uff0c\u9020\u6210\u4e86\u5de8\u989d\u7ecf\u6d4e\u635f\u5931\u3002<\/p>\n<\/li>\n

    2. \n

      \u50f5\u5c38\u7f51\u7edc\u4f20\u64ad<\/strong>\uff1a\u8be5\u6f0f\u6d1e\u5df2\u88ab\u5229\u7528\u6765\u5c06\u6613\u53d7\u653b\u51fb\u7684\u7cfb\u7edf\u62db\u52df\u5230\u50f5\u5c38\u7f51\u7edc\u4e2d\uff0c\u4ece\u800c\u53d1\u52a8\u66f4\u5927\u89c4\u6a21\u7684\u653b\u51fb\u3002<\/p>\n<\/li>\n

    3. \n

      \u6570\u636e\u76d7\u7a83<\/strong>\uff1aEternalBlue \u4fc3\u8fdb\u4e86\u6570\u636e\u6cc4\u9732\uff0c\u5bfc\u81f4\u654f\u611f\u4fe1\u606f\u7684\u6cc4\u9732\u3002<\/p>\n<\/li>\n<\/ol>\n

      \u4e3a\u4e86\u51cf\u8f7b EternalBlue \u5e26\u6765\u7684\u98ce\u9669\uff0c\u5fc5\u987b\u8ba9\u7cfb\u7edf\u4fdd\u6301\u6700\u65b0\u5b89\u5168\u8865\u4e01\u3002\u5728 Shadow Brokers \u6cc4\u5bc6\u4e8b\u4ef6\u53d1\u751f\u540e\uff0c\u5fae\u8f6f\u5728\u5b89\u5168\u66f4\u65b0\u4e2d\u89e3\u51b3\u4e86 SMBv1 \u6f0f\u6d1e\u3002\u5b8c\u5168\u7981\u7528 SMBv1 \u5e76\u4f7f\u7528\u7f51\u7edc\u5206\u6bb5\u4e5f\u6709\u52a9\u4e8e\u51cf\u5c11\u53d7\u5230\u6b64\u6f0f\u6d1e\u653b\u51fb\u7684\u98ce\u9669\u3002<\/p>\n

      \u4e3b\u8981\u7279\u70b9\u53ca\u540c\u7c7b\u4ea7\u54c1\u6bd4\u8f83<\/h2>\n

      EternalBlue \u4e0e\u5176\u4ed6\u8457\u540d\u7684\u7f51\u7edc\u653b\u51fb\u6709\u76f8\u4f3c\u4e4b\u5904\uff0c\u4f46\u5176\u89c4\u6a21\u548c\u5f71\u54cd\u66f4\u4e3a\u7a81\u51fa\uff1a<\/p>\n\n\n\n\n\n\n\n\n
      \u5f00\u53d1<\/th>\n\u63cf\u8ff0<\/th>\n\u5f71\u54cd<\/th>\n<\/tr>\n<\/thead>\n
      \u6c38\u6052\u4e4b\u84dd<\/td>\n\u76ee\u6807\u662f Windows \u7cfb\u7edf\u4e2d\u7684 SMBv1\uff0c\u7528\u4e8e\u5927\u89c4\u6a21\u7f51\u7edc\u653b\u51fb\u3002<\/td>\n\u5168\u7403\u52d2\u7d22\u8f6f\u4ef6\u7206\u53d1\u3002<\/td>\n<\/tr>\n
      \u5fc3\u8840<\/td>\n\u5229\u7528 OpenSSL \u4e2d\u7684\u6f0f\u6d1e\uff0c\u5371\u5bb3 Web \u670d\u52a1\u5668\u3002<\/td>\n\u6f5c\u5728\u7684\u6570\u636e\u6cc4\u9732\u548c\u76d7\u7a83\u3002<\/td>\n<\/tr>\n
      \u70ae\u5f39\u4f11\u514b<\/td>\n\u4ee5 Unix shell Bash \u4e3a\u76ee\u6807\uff0c\u5141\u8bb8\u672a\u7ecf\u6388\u6743\u7684\u8bbf\u95ee\u3002<\/td>\n\u7cfb\u7edf\u6e17\u900f\u548c\u63a7\u5236\u3002<\/td>\n<\/tr>\n
      \u9707\u7f51\u75c5\u6bd2<\/td>\n\u4e00\u79cd\u9488\u5bf9 SCADA \u7cfb\u7edf\u7684\u590d\u6742\u8815\u866b\u3002<\/td>\n\u5173\u952e\u7cfb\u7edf\u4e2d\u65ad\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

      \u4e0e EternalBlue \u76f8\u5173\u7684\u672a\u6765\u89c2\u70b9\u548c\u6280\u672f<\/h2>\n

      EternalBlue \u7684\u51fa\u73b0\u53ca\u5176\u9020\u6210\u7684\u7834\u574f\u6027\u540e\u679c\u4fc3\u4f7f\u4eba\u4eec\u66f4\u52a0\u91cd\u89c6\u7f51\u7edc\u5b89\u5168\u548c\u6f0f\u6d1e\u7ba1\u7406\u3002\u4e3a\u4e86\u9632\u6b62\u5c06\u6765\u518d\u6b21\u53d1\u751f\u7c7b\u4f3c\u4e8b\u4ef6\uff0c\u4eba\u4eec\u8d8a\u6765\u8d8a\u5173\u6ce8\u4ee5\u4e0b\u65b9\u9762\uff1a<\/p>\n

        \n
      1. \n

        \u96f6\u65e5\u6f0f\u6d1e\u7ba1\u7406<\/strong>\uff1a\u5236\u5b9a\u5f3a\u6709\u529b\u7684\u7b56\u7565\u6765\u68c0\u6d4b\u548c\u7f13\u89e3\u53ef\u80fd\u88ab\u5229\u7528\u7684\u96f6\u65e5\u6f0f\u6d1e\uff0c\u5982 EternalBlue\u3002<\/p>\n<\/li>\n

      2. \n

        \u9ad8\u7ea7\u5a01\u80c1\u68c0\u6d4b<\/strong>\uff1a\u5b9e\u65bd\u4e3b\u52a8\u63aa\u65bd\uff0c\u4f8b\u5982\u4eba\u5de5\u667a\u80fd\u9a71\u52a8\u7684\u5a01\u80c1\u68c0\u6d4b\u7cfb\u7edf\uff0c\u4ee5\u6709\u6548\u8bc6\u522b\u548c\u5e94\u5bf9\u7f51\u7edc\u5a01\u80c1\u3002<\/p>\n<\/li>\n

      3. \n

        \u534f\u4f5c\u9632\u5fa1<\/strong>\uff1a\u9f13\u52b1\u653f\u5e9c\u3001\u7ec4\u7ec7\u548c\u5b89\u5168\u7814\u7a76\u4eba\u5458\u5f00\u5c55\u56fd\u9645\u5408\u4f5c\uff0c\u5171\u540c\u5e94\u5bf9\u7f51\u7edc\u5a01\u80c1\u3002<\/p>\n<\/li>\n<\/ol>\n

        \u5982\u4f55\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u6216\u5c06\u5176\u4e0e EternalBlue \u5173\u8054<\/h2>\n

        \u5bf9\u4e8e EternalBlue \u6765\u8bf4\uff0c\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u8d77\u5230\u9632\u5fa1\u548c\u8fdb\u653b\u7684\u4f5c\u7528\uff1a<\/p>\n

          \n
        1. \n

          \u9632\u5fa1\u6027\u7528\u9014<\/strong>\uff1a\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u5145\u5f53\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u4e4b\u95f4\u7684\u4e2d\u4ecb\uff0c\u901a\u8fc7\u8fc7\u6ee4\u548c\u68c0\u67e5\u7f51\u7edc\u6d41\u91cf\u6765\u589e\u5f3a\u5b89\u5168\u6027\u3002\u5b83\u4eec\u53ef\u4ee5\u5e2e\u52a9\u68c0\u6d4b\u548c\u963b\u6b62\u4e0e EternalBlue \u76f8\u5173\u7684\u53ef\u7591\u6d3b\u52a8\uff0c\u4ece\u800c\u51cf\u8f7b\u6f5c\u5728\u653b\u51fb\u3002<\/p>\n<\/li>\n

        2. \n

          \u8fdb\u653b\u6027\u4f7f\u7528<\/strong>\uff1a\u4e0d\u5e78\u7684\u662f\uff0c\u4ee3\u7406\u670d\u52a1\u5668\u4e5f\u53ef\u80fd\u88ab\u653b\u51fb\u8005\u6ee5\u7528\uff0c\u4ee5\u63a9\u76d6\u5176\u8e2a\u8ff9\u5e76\u9690\u85cf\u5176\u6076\u610f\u6d3b\u52a8\u7684\u6765\u6e90\u3002\u8fd9\u53ef\u80fd\u5305\u62ec\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u4e2d\u7ee7\u6f0f\u6d1e\u6d41\u91cf\u5e76\u5728\u53d1\u8d77\u653b\u51fb\u65f6\u4fdd\u6301\u533f\u540d\u3002<\/p>\n<\/li>\n<\/ol>\n

          \u76f8\u5173\u94fe\u63a5<\/h2>\n

          \u6709\u5173 EternalBlue\u3001\u7f51\u7edc\u5b89\u5168\u548c\u76f8\u5173\u4e3b\u9898\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u60a8\u53ef\u4ee5\u53c2\u8003\u4ee5\u4e0b\u8d44\u6e90\uff1a<\/p>\n

            \n
          1. Microsoft \u5b89\u5168\u516c\u544a MS17-010<\/a><\/li>\n
          2. \u5f71\u5b50\u7ecf\u7eaa\u4eba\u6cc4\u5bc6\u4e8b\u4ef6<\/a><\/li>\n
          3. WannaCry \u52d2\u7d22\u8f6f\u4ef6\u653b\u51fb<\/a><\/li>\n
          4. EternalBlue\uff1a\u4e86\u89e3 SMBv1 \u6f0f\u6d1e<\/a><\/li>\n<\/ol>","protected":false},"featured_media":468324,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-477119","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about EternalBlue: A Deep Dive into the Infamous Cyberweapon<\/mark>","faq_items":[{"question":"What is EternalBlue?","answer":"

            EternalBlue is a powerful cyberweapon developed by the United States National Security Agency (NSA) that exploits a vulnerability in Microsoft's Windows operating systems. It allows attackers to remotely execute code on vulnerable systems, making it a dangerous tool in the hands of cybercriminals.<\/p>"},{"question":"How did EternalBlue become widely known?","answer":"

            EternalBlue gained widespread attention when a group known as the Shadow Brokers leaked a significant portion of the NSA's hacking tools in August 2016. The leaked archive included EternalBlue, which marked its first public mention.<\/p>"},{"question":"How does EternalBlue work?","answer":"

            EternalBlue targets a vulnerability in the Server Message Block (SMB) protocol used by Windows operating systems. By sending a specially crafted packet, the exploit triggers an overflow in the system's kernel pool, allowing attackers to execute their code remotely.<\/p>"},{"question":"What are the key features of EternalBlue?","answer":"

            The key features that make EternalBlue dangerous are remote code execution, its worm-like propagation capability, stealthiness, and the ability to target Windows operating systems.<\/p>"},{"question":"What types of EternalBlue exploits exist?","answer":"

            Various versions of EternalBlue exploits were leaked by the Shadow Brokers. Some of them include EternalRomance, EternalSynergy, EternalChampion, and EternalBlueBatch.<\/p>"},{"question":"How can EternalBlue be used, and what are the problems associated with it?","answer":"

            EternalBlue has been used for malicious purposes, such as ransomware attacks, botnet propagation, and data theft. The problems it causes include massive financial losses and data breaches. To address these issues, it's essential to keep systems up-to-date with security patches and disable SMBv1.<\/p>"},{"question":"How does EternalBlue compare to similar cyber exploits?","answer":"

            EternalBlue stands out due to its role in massive cyber attacks, like WannaCry. It differs from other exploits like Heartbleed, Shellshock, and Stuxnet in its target and impact.<\/p>"},{"question":"What are the future perspectives related to EternalBlue?","answer":"

            The future of cybersecurity involves improved zero-day vulnerability management, advanced threat detection systems, and collaborative defense strategies to combat threats like EternalBlue.<\/p>"},{"question":"How can proxy servers be associated with EternalBlue?","answer":"

            Proxy servers can serve as a defense against EternalBlue by filtering and inspecting network traffic. However, attackers may misuse proxy servers to hide their tracks and maintain anonymity while launching attacks.<\/p>"},{"question":"Where can I find more information about EternalBlue and related topics?","answer":"

            For more information on EternalBlue, cybersecurity, and related subjects, you can refer to the provided links and OneProxy's informative article.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/477119","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/477119\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media\/468324"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media?parent=477119"}],"curies":[{"name":"\u53ef\u6e7f\u6027\u7c89\u5242","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}