security-attack / RingKiller
git clone https://github.com/security-attack/RingKiller.git
RingKiller — BYOD PoC for vulnerable driver DCRCVDrv.sys. Abuses IOCTL 0x2205C0 to kill arbitrary processes from ring 0 via ZwTerminateProcess. EDR/AV termination primitive. Lab only.
+0
stars, 24h · #28,363
+~0
stars, 7 days · #28,838
+~0
stars, 30 days · #35,191
26
★ total
6
forks · 0 open issues
Star history (as recorded here)
LanguageC
LicenseMIT
Created2026-09-12 (1mo ago)
Last push1mo ago
OwnerUser
GitHub topics
av-bypassav-killerbyovdedr-bypassedr-killerevasionkernel-exploitationoffensive-securityprocess-terminationred-teamvulnerable-driverswindows-kernel
Links
- GitHub: github.com/security-attack/RingKiller
- Homepage: https://ninjas.zip
- Releases · Issues · Hacker News mentions