<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>File-Locking on HackingPassion.com : root@HackingPassion.com-[~]</title><link>https://hackingpassion.com/tags/file-locking/</link><description>Recent content in File-Locking on HackingPassion.com : root@HackingPassion.com-[~]</description><generator>Hugo</generator><language>en</language><lastBuildDate>Mon, 11 May 2026 14:22:19 +0200</lastBuildDate><atom:link href="https://hackingpassion.com/tags/file-locking/index.xml" rel="self" type="application/rss+xml"/><item><title>GhostLock Delivers Ransomware Impact on Windows Without Touching a Single File</title><link>https://hackingpassion.com/ghostlock-smb-file-lock-ransomware/</link><pubDate>Mon, 11 May 2026 14:22:19 +0200</pubDate><guid>https://hackingpassion.com/ghostlock-smb-file-lock-ransomware/</guid><description>&lt;p>&lt;strong>GhostLock locks every shared file on any Windows network in minutes using nothing but a standard login, and every security tool watching stays completely silent. This has been possible for over 30 years. Microsoft is not going to patch this.&lt;/strong>&lt;/p>
&lt;p>Security researcher Kim Dvash published the proof of concept in May 2026, after discovering the technique during a prior authorized red team engagement.&lt;/p>
&lt;p>&lt;strong>SMB&lt;/strong> is the protocol Windows uses to share files across a network. When a program opens a file over SMB, it tells Windows how it wants to share that file with other programs at the same time. Set that sharing mode to zero using a parameter called &lt;code>dwShareMode&lt;/code> in the &lt;code>CreateFileW&lt;/code> API call, and Windows grants an &lt;strong>exclusive deny-share handle&lt;/strong>. While that handle is held open, every other process, user, or system trying to open the same file gets back one thing:&lt;/p></description></item></channel></rss>