#!/usr/bin/env python3
import socket
import sys

target = sys.argv[1]
port = 445

# MS17-010 check (simplified)
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.settimeout(3)

try:
    s.connect((target, port))
    # Send SMB negotiate protocol request
    negotiate = bytes.fromhex('00000085ff534d4272000000001853c8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000500ff000000000000000000000000000000000000000000000000000000000000')
    s.send(negotiate)
    
    response = s.recv(1024)
    if response:
        print("[+] Target responded to SMB request")
        # Check for Windows version in response (simplified)
        if b"Windows" in response:
            print("[+] Windows system detected")
            # Could be vulnerable if old version
    s.close()
except Exception as e:
    print(f"[-] Error: {e}")