8000 GitHub - 0xcpu/winsmsd: Windows (ShadowMove) Socket Duplication
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

0xcpu/winsmsd

Repository files navigation

Windows ShadowMove Socket Duplication

Description

The tool (/POC) is a simple programming exercise in order to replicate the socket duplication technique explained in ShadowMove: A Stealthy Lateral Movement Strategy.

My purpose for this tool was to trigger events that can be monitored / logged and later used for endpoint detection.


About

Windows (ShadowMove) Socket Duplication

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

0