SkillAgentSearch skills...

Killers

Exploitation of process killer drivers

Install / Use

/learn @xalicex/Killers
About this skill

Quality Score

0/100

Supported Platforms

Universal

README

Killers

<p align="center"> <img src="https://github.com/xalicex/Killers/blob/main/killers.jpg" width=40% height=40% > </p>

In this repository 2 PoCs exploiting 2 different vulnerable process killer driver are available.

These PoCs are related to a blogpost explaining how to find, reverse and exploit this type of vulnerable driver : https://alice.climent-pommeret.red/posts/process-killer-driver/

Avast

https://www.loldrivers.io/drivers/57fc510a-e649-4599-b83e-8f3605e3d1d9/

x86_64-w64-mingw32-gcc -o avast_killer.exe avast_killer.c 
sc.exe create aswArPot.sys binPath= C:\windows\temp\aswArPot.bin type= kernel && sc.exe start aswArPot.sys

PowerTool

https://www.loldrivers.io/drivers/fe2f68e1-e459-4802-9a9a-23bb3c2fd331

x86_64-w64-mingw32-gcc -o PowerTool_killer.exe PowerTool_killer.c 
sc.exe create kEvP64.sys binPath= C:\windows\temp\kEvP64.bin type= kernel && sc.exe start kEvP64.sys

PowerTool official website : http://powertool.s601.xrea.com/

Download page : https://www.softpedia.com/get/Antivirus/Removal-Tools/ithurricane-PowerTool.shtml

Related Skills

View on GitHub
GitHub Stars204
CategoryDevelopment
Updated1d ago
Forks27

Languages

C

Security Score

80/100

Audited on Mar 30, 2026

No findings