Lame

$ tldr SMB → Samba 3.0.20 RCE → root directo

·	·
Operating system	Linux
Difficulty	Easy
Vector	Linux privesc
IP	`10.10.10.3`
Retirement date	2017-03-14
Skills	Samba 3.0.20 < 3.0.25rc3 - Username Map Script [Command Execution]

Writeups

Language	Author	Format	Link
🇪🇸 ES	S4vitar	Vídeo	Open
🇪🇸 ES	El Pingüino de Mario	Vídeo	Open
🇬🇧 EN	0xdf	Texto	Open
🇬🇧 EN	0xdf	Texto	Open
🇬🇧 EN	IppSec	Vídeo	Open

Curated documentation for each technique listed in the Skills column above. Sources: HackTricks, GTFOBins, PortSwigger, etc.

Skill	Source	Link
Samba 3.0.20 RCE (CVE-2007-2447)	HackTricks	Open

Remote Code Execution (RCE) · EternalBlue (MS17-010) · MS08-067 (NetAPI)

Did the official writeup not work? Found a smarter trick? Share it here — comments live in GitHub Discussions.

Last updated: 2026-06-07