Port Scanning and General Enumeration (Nmap)
Initial nmap scan shows 135,139,445,49152-3-4-5-6-7 open. So I targeted those ports in my targets scan.
Also ran a
Access (metasploit, EternalBlue (ms17-010))
Knowing that the SMB version is vulnerable to EternalBlue and that the OS hasn’t been patched (Windows 7 Professional SP1) we can use a metasploit module for access
That was easy! Capture the flags.