http://technet.microsoft.com/en-us/security/bulletin/MS17-010 https://github.com/worawit/MS17-010 https://hitcon.org/2017/CMT/slide-files/d2_s2_r0.pdf https://blogs.technet.microsoft.com/srd/2017/06/29/eternal-champion-exploit-analysis/ https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/smb/ms17_010_command.rb https://zerosum0x0.blogspot.com/2017/04/doublepulsar-initial-smb-backdoor-ring.html https://github.com/countercept/doublepulsar-detection-script https://web.archive.org/web/20170513050203/https://technet.microsoft.com/en-us/library/security/ms17-010.aspx https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/smb/smb_ms17_010.rb https://github.com/RiskSense-Ops/MS17-010 https://risksense.com/wp-content/uploads/2018/05/White-Paper_Eternal-Blue.pdf https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms17_010_eternalblue.rb https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms17_010_psexec.rb https://countercept.com/blog/analyzing-the-doublepulsar-kernel-dll-injection-technique/ https://www.countercept.com/blog/doublepulsar-usermode-analysis-generic-reflective-dll-loader/ https://github.com/countercept/doublepulsar-c2-traffic-decryptor https://gist.github.com/msuiche/50a36710ee59709d8c76fa50fc987be1 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/smb_doublepulsar_rce.rb