GeezerVison is showing github.com — GitHub - 0xcpu/winsmsd: Windows (ShadowMove) Socket Duplication
Folders and files
| Name | Name | Last commit message | Last commit date |
|---|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
|
Repository files navigation
Windows ShadowMove Socket Duplication
The tool (/POC) is a simple programming exercise in order to replicate the socket duplication technique explained in ShadowMove: A Stealthy Lateral Movement Strategy.
My purpose for this tool was to trigger events that can be monitored / logged and later used for endpoint detection.
About
Windows (ShadowMove) Socket Duplication
Topics
Resources
Stars
87 stars
Watchers
5 watching
Forks