{"id":17963916,"url":"https://github.com/anthonycalandra/netfork","last_synced_at":"2025-08-16T10:33:35.530Z","repository":{"id":194656504,"uuid":"691282507","full_name":"AnthonyCalandra/netfork","owner":"AnthonyCalandra","description":"Fork a Windows process over the internet.","archived":false,"fork":false,"pushed_at":"2023-10-03T23:35:47.000Z","size":35,"stargazers_count":2,"open_issues_count":0,"forks_count":2,"subscribers_count":2,"default_branch":"master","last_synced_at":"2024-10-29T12:42:49.975Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"C++","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"agpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/AnthonyCalandra.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-09-13T21:36:33.000Z","updated_at":"2023-11-24T20:20:46.000Z","dependencies_parsed_at":"2024-10-29T12:09:24.222Z","dependency_job_id":null,"html_url":"https://github.com/AnthonyCalandra/netfork","commit_stats":null,"previous_names":["anthonycalandra/netfork"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/AnthonyCalandra%2Fnetfork","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/AnthonyCalandra%2Fnetfork/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/AnthonyCalandra%2Fnetfork/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/AnthonyCalandra%2Fnetfork/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/AnthonyCalandra","download_url":"https://codeload.github.com/AnthonyCalandra/netfork/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":230033156,"owners_count":18162575,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-10-29T11:45:51.701Z","updated_at":"2024-12-16T22:23:01.673Z","avatar_url":"https://github.com/AnthonyCalandra.png","language":"C++","funding_links":[],"categories":[],"sub_categories":[],"readme":"# netfork\n\nA research project which provides functionality of forking a Windows process over the internet.\n\nNetforking works similarly to POSIX `fork`. For example, run a process on machine A, call `netfork::fork` in that process, and it will continue executing at the call site on machine B. The process running on machine A will return from the call site and continue execution.\n\n## Security Implications\n\nSince the netfork server is meant to reconstruct a process given the data received from the client, it is possible to execute malicious processes. Be careful!\n\n## Limitations\n\n* Tested on Windows 10 only.\n* Potentially will not work with machines running different versions of Windows.\n* Since netfork is not running in kernel-space, it can't perfectly recreate a process' memory address space, and so may fail.\n* Single-threaded forking only.\n* Sharing resources between forking boundaries will not work.\n    * e.g. It's not possible to duplicate opened file handles.\n* It was not made with security in mind.\n* Very large processes will probably take a long time to netfork; or there will likely be a higher chance of failure.\n\n## References\n\n* Windows Internals, 7th Edition\n* https://captmeelo.com/redteam/maldev/2022/05/10/ntcreateuserprocess.html\n* https://www.geoffchappell.com/index.htm\n* https://github.com/winsiderss/phnt\n* https://www.huntandhackett.com/blog/concealed-code-execution-techniques-and-detection\n* https://medium.com/@Achilles8284 (\"Birth of a Process\", Parts 1 and 2)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fanthonycalandra%2Fnetfork","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fanthonycalandra%2Fnetfork","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fanthonycalandra%2Fnetfork/lists"}