Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
GhostDriver — yet another AV killer tool using BYOVD | Kitploit
Tools/GitHubGitHub/blacksnufkin/ghostdriver
Defensive ToolsPrivilege EscalationPersistence MechanismsExploitationIDS/IPS EvasionPost-ExploitationRed Teaming
GitHubblacksnufkin/ghostdriver

GhostDriver

yet another AV killer tool using BYOVD

View Repository
312372 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

GhostDriver 👻

About

GhostDriver is a Rust-built AV killer tool using BYOVD.

Get Started

  1. Install Rust from rust-lang.org
  2. Clone: git clone https://github.com/BlackSnufkin/GhostDriver.git
  3. Build: cargo build --release --target=x86_64-pc-windows-msvc
  4. Run: Execute the GhostDriver binary

Usage:

root@kitploit:~
GhostDriver.exe 2.0
BlackSnufkin
Kills processes by name using a Ghost Driver

USAGE:
    GhostDriver.exe [FLAGS] [OPTIONS]

FLAGS:
    -h, --help       Prints help information
    -v, --version    Prints version information

OPTIONS:
    -n, --name=process_names

EXAMPLES:
        .\GhostDriver.exe -n msmpeng.exe,svchost.exe
        .\GhostDriver.exe --name msmpeng.exe
        .\GhostDriver.exe (uses default processes)
  • Change line 3307 for the defualt Process names
root@kitploit:~
// Define default process names
let default_process_names = vec!["msmpeng.exe"];

POC

gd2

Reference

  • https://github.com/keowu/BadRentdrv2
  • https://unit42.paloaltonetworks.com/agonizing-serpens-targets-israeli-tech-higher-ed-sectors
Download Tool