Bruno Pedro

@brunopedro.com

7087 Followers 0 Following

Building an API Product: Design, implement, release, and maintain API products that meet user needs: https://a.co/d/dE6pQpK Opinions expressed are solely my own and do not express the views or opinions of my employer.

Researcher Kim Dvash recently introduced GhostLock, a Python-based proof-of-concept tool that demonstrates how low-privileged users can orchestrate a widespread Denial of Service (DoS) across file-share networks without altering or encrypting data. The utility exploits a documented, native Windows Win32 file API function known as CreateFileW. By explicitly passing the sharing mode parameter dwShareMode = 0x00000000, the tool requests an exclusive deny-share handle over targeted files across SMB network shares.

When scaled across entire directory structures, it blocks access for all other network clients, inducing continuous STATUS_SHARING_VIOLATION errors. Analysts point out that this is an abuse of legitimate data-integrity API parameters rather than a system flaw, meaning the access restriction is instantly removed as soon as the offending SMB session holding the API handles is terminated.