blacksnufkin/ghostdriverun énième outil AV killer utilisant BYOVD
GhostDriver est un outil de neutralisation d'antivirus écrit en Rust et utilisant BYOVD.
git clone https://github.com/BlackSnufkin/GhostDriver.gitcargo build --release --target=x86_64-pc-windows-msvcGhostDriver.exe 2.0
BlackSnufkin
Kills processes by name using a Ghost Driver
USAGE:
GhostDriver.exe [FLAGS] [OPTIONS]
FLAGS:
-h, --help Prints help information
-v, --version Prints version information
OPTIONS:
-n, --name=process_names
EXAMPLES:
.\GhostDriver.exe -n msmpeng.exe,svchost.exe
.\GhostDriver.exe --name msmpeng.exe
.\GhostDriver.exe (uses default processes)
// Define default process names
let default_process_names = vec!["msmpeng.exe"];
