Nmap was used to scan a Windows machine and found that port 445 SMB port was open, allowing file sharing access. The EternalBlue exploit was located to take advantage of this vulnerability. Msfvenom was used to generate an encoded payload that could bypass firewalls and be difficult to detect, allowing remote code execution on the vulnerable system through the SMB port. The encoded payload would leverage the EternalBlue exploit to compromise the Windows machine.

2. Vulnerability analysis and payload
Vvlunerability based:
In windows note ip address
In lkali check what vlunerabilities are present using nmap
Nmap windows ip
Nmap –sT ip
(many ports are open)
Port 445 snb port is open
It is a sharanging point we can find printer file sharing etc

3. • Locate .nse | grep smb
• Famous exploit eternal blue
• Insert

4. • Msfvenom is used to generate a payload
• Combination of msfpayload and msfencode
• Previously commands were used in 2015. now it is combined in
msfvenom
• Encoder: if a payload is generated it will be detected by firewalls. So
we will encode these payload so that it will be difficult to firewall for
recognizing it.
• If I use iteration then encoder is performed n number of times.