Skip to content

Commit 386ff51

Browse files
author
Luke Jennings
committed
Line break fix
1 parent 5f0b92f commit 386ff51

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

README.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,10 @@
11
Author: Luke Jennings ([email protected] - @jukelennings)
2+
23
Company: Countercept (@countercept)
4+
35
Website: https://countercept.com
46

7+
58
A python2 script for sweeping a list of IPs for the presence of the DOUBLEPULSAR SMB implant that was released by the Shadow Brokers. Supports both single IP checking and a list of IPs in a file with multi-threading support.
69

710
This is a very early release in the interests of allowing people to find compromises on their network now that these exploits are in the wild and no doubt being used to target organizations. It re-implements the ping command of the implant, which can be used remotely without authentication, in order to determine if a system is infected or not.
@@ -11,7 +14,10 @@ Not all OS versions have been tested and some currently fail. For example, 2012
1114
Simple example usage pre and post-exploit:
1215

1316
root@kali:~# python detect_doublepulsar.py --ip 192.168.175.128
17+
1418
[-] [192.168.175.128] No presence of DOUBLEPULSAR
1519

20+
1621
root@kali:~# python detect_doublepulsar.py --ip 192.168.175.128
22+
1723
[+] [192.168.175.128] DOUBLEPULSAR DETECTED!!!

0 commit comments

Comments
 (0)