Skip to content

Commit 47fe202

Browse files
authored
Added ZwTerminateProcess to list of dangerous functions
ZwTerminateProcess can be used to terminate any process in the system (even protected processes such as AVs). See also: https://youtu.be/ViWLMfSwGVA
1 parent ce7d9d4 commit 47fe202

File tree

1 file changed

+1
-0
lines changed
  • DriverBuddyReloaded/vulnerable_functions_lists

1 file changed

+1
-0
lines changed

DriverBuddyReloaded/vulnerable_functions_lists/winapi.py

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -199,6 +199,7 @@
199199
# ZwSetInformationTransaction
200200
# ZwSetValueKey
201201
# ZwSinglePhaseReject
202+
# ZwTerminateProcess
202203
# ZwUnloadDriver
203204
# ZwUnmapViewOfSection
204205
# ZwWriteFile

0 commit comments

Comments
 (0)