Since Microsoft no longer hosts public downloads for Windows 7, you generally have two reliable paths:
Even "older" exploits like EternalBlue—the same vulnerability used by and NotPetya ransomware—still work on a vulnerable Windows 7 ISO. In 2023 and 2024, threat actors continued to deploy EternalBlue against legacy systems found in manufacturing, healthcare, and small government offices.