hub / github.com/BlackSnufkin/GhostDriver

github.com/BlackSnufkin/GhostDriver @main

Chat with this repo

repository ↗ · DeepWiki ↗ · + Follow

25 symbols 39 edges 1 files 2 documented · 8%

What it actually does AI analysis from the code graph — generated when you open this

loading…

README

GhostDriver 👻

About

GhostDriver is a Rust-built AV killer tool using BYOVD.

Get Started

Install Rust from rust-lang.org
Clone: git clone https://github.com/BlackSnufkin/GhostDriver.git
Build: cargo build --release --target=x86_64-pc-windows-msvc
Run: Execute the GhostDriver binary

Usage:

GhostDriver.exe 2.0
BlackSnufkin
Kills processes by name using a Ghost Driver

USAGE:
    GhostDriver.exe [FLAGS] [OPTIONS]

FLAGS:
    -h, --help       Prints help information
    -v, --version    Prints version information

OPTIONS:
    -n, --name=process_names

EXAMPLES:
        .\GhostDriver.exe -n msmpeng.exe,svchost.exe
        .\GhostDriver.exe --name msmpeng.exe
        .\GhostDriver.exe (uses default processes)

Change line 3307 for the defualt Process names

// Define default process names
let default_process_names = vec!["msmpeng.exe"];

POC

gd2

Reference

https://github.com/keowu/BadRentdrv2
https://unit42.paloaltonetworks.com/agonizing-serpens-targets-israeli-tech-higher-ed-sectors

Extension points exported contracts — how you extend this code

Driver (Interface)

Define the trait for driver interaction [1 implementers]

GhostDriver/src/main.rs

Core symbols most depended-on inside this repo

to_wstring

called by 5

GhostDriver/src/main.rs

kill_process_by_pid

called by 2

GhostDriver/src/main.rs

to_string

called by 2

GhostDriver/src/main.rs

get_current_dir

called by 2

GhostDriver/src/main.rs

get_pids_by_names

called by 2

GhostDriver/src/main.rs

start_driver

called by 1

GhostDriver/src/main.rs

stop_driver

called by 1

GhostDriver/src/main.rs

drop_driver_on_disk

called by 1

GhostDriver/src/main.rs

Shape

Method 15

Function 6

Class 3

Interface 1

Languages

Rust100%

Modules by API surface

GhostDriver/src/main.rs25 symbols

For agents

$ claude mcp add GhostDriver \
  -- python -m otcore.mcp_server <graph>

⬇ download graph artifact