Stage EternalBlue PneumaEX plugin payload
Stage a payload for use in the EternalBlue PneumaEX module. The EternalBlue PneumaEX module uses EternalBlue to exploit SMBv1 services. Once exploited, the module uses DoublePulsar to load and execute shellcode in the kernel. The default payload contains shellcode to launch calc.exe.
To view this TTPs command, you must be logged in with a professional or enterprise license.Login
Test this TTP
Download Operator (1.7.1)