GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — GitHub - 0xcpu/winsmsd: Windows (ShadowMove) Socket Duplication

BranchesTags
Open more actions menu

Latest commit

 

History

4 Commits
4 Commits

Folders and files

NameName
Last commit message
Last commit date
.gitattributes
.gitattributes
 
 
.gitignore
.gitignore
 
 
README.md
README.md
 
 
winsmsd.c
winsmsd.c
 
 
winsmsd.h
winsmsd.h
 
 
winsmsd.sln
winsmsd.sln
 
 
winsmsd.vcxproj
winsmsd.vcxproj
 
 
winsmsd.vcxproj.filters
winsmsd.vcxproj.filters
 
 

Repository files navigation

Windows ShadowMove Socket Duplication

Description

The tool (/POC) is a simple programming exercise in order to replicate the socket duplication technique explained in ShadowMove: A Stealthy Lateral Movement Strategy.

My purpose for this tool was to trigger events that can be monitored / logged and later used for endpoint detection.


About

Windows (ShadowMove) Socket Duplication

Topics

detectionevasionwindows

Resources

Readme
Activity

Stars

87 stars

Watchers

5 watching

Forks

25 forks
Report repository

Releases

Packages

Used by

Contributors

Languages

You are visitor 01402520 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.