We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 64a91a5 commit 663bcbeCopy full SHA for 663bcbe
modules/post/windows/manage/killav.rb
@@ -26,6 +26,13 @@ def initialize(info={})
26
))
27
end
28
29
+ def skip_process_name?(process_name)
30
+ [
31
+ '[system process]',
32
+ 'system'
33
+ ].include?(process_name)
34
+ end
35
+
36
def run
37
avs = ::File.read(::File.join(Msf::Config.data_directory, 'wordlists',
38
'av_hips_executables.txt')).strip
@@ -34,6 +41,7 @@ def run
41
processes_found = 0
42
processes_killed = 0
43
client.sys.process.get_processes().each do |x|
44
+ next if skip_process_name?(x['name'].downcase)
45
vprint_status("Checking #{x['name'].downcase} ...")
46
if avs.include?(x['name'].downcase)
39
47
processes_found += 1
0 commit comments