{"adoption": {"forks": 174, "observed_at": "2026-08-28T04:03:25.874543+00:00", "stars": 1061}, "canonical_url": "https://ross.abutalabs.com/products/zeromemoryex-terminator", "card": {"archived": false, "artifact_type": "application", "description": "Reproducing Spyboy technique to terminate all EDR/XDR/AVs processes", "domain": ["security", "penetration-testing", "windows"], "enriched": true, "function": ["security", "penetration-testing", "reverse-engineering"], "health_score": 21, "homepage": "https://www.hackandhide.com/the-story-behind-blackout-abusing-gmer-driver-to-terminate-protected-processes/", "language": "C++", "license": null, "license_family": "other", "maturity": "experimental", "member_repos": ["ZeroMemoryEx/Terminator"], "name": "ZeroMemoryEx/Terminator", "platform": ["windows", "cpp", "cli"], "pushed_at": "2023-06-20T17:49:04+00:00", "repo": "ZeroMemoryEx/Terminator", "stars": 1061, "tags": ["edr-killer", "byod-driver-abuse", "bring-your-own-vulnerable-driver", "windows-kernel", "offensive-security", "red-team", "proof-of-concept"], "topics": [], "urls": [], "use_cases": ["kill edr and antivirus processes on windows", "reproduce spyboy terminator technique", "test endpoint protection resilience against driver abuse", "demonstrate byovd attack for red team research", "study vulnerable driver ioctl exploitation"], "what_it_is": "Terminator is a C++ proof-of-concept tool that terminates EDR/XDR/antivirus processes on Windows by abusing the vulnerable, signed zam64.sys driver via IOCTLs, reproducing the technique sold by Spyboy. It demonstrates bring-your-own-vulnerable-driver attacks for security research.", "when_to_avoid": ["you need a defensive or production tool", "you want licensed or maintained software - it has no license and is a niche PoC", "you are not on Windows with administrator privileges"], "when_to_choose": ["you are a security researcher or red teamer studying BYOVD EDR-termination techniques", "you want a working PoC of the zam64.sys driver abuse"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/zeromemoryex-terminator", "repo": "ZeroMemoryEx/Terminator", "role": "main", "score": 20}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:03:25.874543+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T06:56:49.319394+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1d76b5910f73f527d856c55b84104f1490f7fcd6fbdc28ec69f8413037745b1c", "fetched_at": "2026-08-28T04:03:25.874543+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ZeroMemoryEx/Terminator"}, {"content_hash": "2eb084781ed2d05cfb057040bb471bfeb5b6822fb36c116196eee718cef29224", "fetched_at": "2026-08-29T12:58:33.455088+00:00", "kind": "homepage", "missing": false, "url": "https://www.hackandhide.com/the-story-behind-blackout-abusing-gmer-driver-to-terminate-protected-processes/"}, {"content_hash": "11bf68ecf21babb9bd1110a68f9452220894c5c3ad0336d90fe1cf60d07c7d85", "fetched_at": "2026-08-29T12:58:33.458238+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/about"}, {"content_hash": "904fb830a44672c0af6c49f54adf2c1c6d1849e2ec4fd558cf67aa496ad4d1de", "fetched_at": "2026-08-29T12:58:33.460404+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/cve-2025-68921"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:03:25.874543+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T06:56:49.319394+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1d76b5910f73f527d856c55b84104f1490f7fcd6fbdc28ec69f8413037745b1c", "fetched_at": "2026-08-28T04:03:25.874543+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ZeroMemoryEx/Terminator"}, {"content_hash": "2eb084781ed2d05cfb057040bb471bfeb5b6822fb36c116196eee718cef29224", "fetched_at": "2026-08-29T12:58:33.455088+00:00", "kind": "homepage", "missing": false, "url": "https://www.hackandhide.com/the-story-behind-blackout-abusing-gmer-driver-to-terminate-protected-processes/"}, {"content_hash": "11bf68ecf21babb9bd1110a68f9452220894c5c3ad0336d90fe1cf60d07c7d85", "fetched_at": "2026-08-29T12:58:33.458238+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/about"}, {"content_hash": "904fb830a44672c0af6c49f54adf2c1c6d1849e2ec4fd558cf67aa496ad4d1de", "fetched_at": "2026-08-29T12:58:33.460404+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/cve-2025-68921"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T06:56:49.319394+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1d76b5910f73f527d856c55b84104f1490f7fcd6fbdc28ec69f8413037745b1c", "fetched_at": "2026-08-28T04:03:25.874543+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ZeroMemoryEx/Terminator"}, {"content_hash": "2eb084781ed2d05cfb057040bb471bfeb5b6822fb36c116196eee718cef29224", "fetched_at": "2026-08-29T12:58:33.455088+00:00", "kind": "homepage", "missing": false, "url": "https://www.hackandhide.com/the-story-behind-blackout-abusing-gmer-driver-to-terminate-protected-processes/"}, {"content_hash": "11bf68ecf21babb9bd1110a68f9452220894c5c3ad0336d90fe1cf60d07c7d85", "fetched_at": "2026-08-29T12:58:33.458238+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/about"}, {"content_hash": "904fb830a44672c0af6c49f54adf2c1c6d1849e2ec4fd558cf67aa496ad4d1de", "fetched_at": "2026-08-29T12:58:33.460404+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/cve-2025-68921"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:03:25.874543+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:03:25.874543+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:03:25.874543+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T06:56:49.319394+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1d76b5910f73f527d856c55b84104f1490f7fcd6fbdc28ec69f8413037745b1c", "fetched_at": "2026-08-28T04:03:25.874543+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ZeroMemoryEx/Terminator"}, {"content_hash": "2eb084781ed2d05cfb057040bb471bfeb5b6822fb36c116196eee718cef29224", "fetched_at": "2026-08-29T12:58:33.455088+00:00", "kind": "homepage", "missing": false, "url": "https://www.hackandhide.com/the-story-behind-blackout-abusing-gmer-driver-to-terminate-protected-processes/"}, {"content_hash": "11bf68ecf21babb9bd1110a68f9452220894c5c3ad0336d90fe1cf60d07c7d85", "fetched_at": "2026-08-29T12:58:33.458238+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/about"}, {"content_hash": "904fb830a44672c0af6c49f54adf2c1c6d1849e2ec4fd558cf67aa496ad4d1de", "fetched_at": "2026-08-29T12:58:33.460404+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/cve-2025-68921"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:03:25.874543+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:03:25.874543+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T06:56:49.319394+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1d76b5910f73f527d856c55b84104f1490f7fcd6fbdc28ec69f8413037745b1c", "fetched_at": "2026-08-28T04:03:25.874543+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ZeroMemoryEx/Terminator"}, {"content_hash": "2eb084781ed2d05cfb057040bb471bfeb5b6822fb36c116196eee718cef29224", "fetched_at": "2026-08-29T12:58:33.455088+00:00", "kind": "homepage", "missing": false, "url": "https://www.hackandhide.com/the-story-behind-blackout-abusing-gmer-driver-to-terminate-protected-processes/"}, {"content_hash": "11bf68ecf21babb9bd1110a68f9452220894c5c3ad0336d90fe1cf60d07c7d85", "fetched_at": "2026-08-29T12:58:33.458238+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/about"}, {"content_hash": "904fb830a44672c0af6c49f54adf2c1c6d1849e2ec4fd558cf67aa496ad4d1de", "fetched_at": "2026-08-29T12:58:33.460404+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/cve-2025-68921"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:03:25.874543+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:03:25.874543+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:03:25.874543+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T06:56:49.319394+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1d76b5910f73f527d856c55b84104f1490f7fcd6fbdc28ec69f8413037745b1c", "fetched_at": "2026-08-28T04:03:25.874543+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ZeroMemoryEx/Terminator"}, {"content_hash": "2eb084781ed2d05cfb057040bb471bfeb5b6822fb36c116196eee718cef29224", "fetched_at": "2026-08-29T12:58:33.455088+00:00", "kind": "homepage", "missing": false, "url": "https://www.hackandhide.com/the-story-behind-blackout-abusing-gmer-driver-to-terminate-protected-processes/"}, {"content_hash": "11bf68ecf21babb9bd1110a68f9452220894c5c3ad0336d90fe1cf60d07c7d85", "fetched_at": "2026-08-29T12:58:33.458238+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/about"}, {"content_hash": "904fb830a44672c0af6c49f54adf2c1c6d1849e2ec4fd558cf67aa496ad4d1de", "fetched_at": "2026-08-29T12:58:33.460404+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/cve-2025-68921"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:03:25.874543+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:03:25.874543+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T06:56:49.319394+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1d76b5910f73f527d856c55b84104f1490f7fcd6fbdc28ec69f8413037745b1c", "fetched_at": "2026-08-28T04:03:25.874543+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ZeroMemoryEx/Terminator"}, {"content_hash": "2eb084781ed2d05cfb057040bb471bfeb5b6822fb36c116196eee718cef29224", "fetched_at": "2026-08-29T12:58:33.455088+00:00", "kind": "homepage", "missing": false, "url": "https://www.hackandhide.com/the-story-behind-blackout-abusing-gmer-driver-to-terminate-protected-processes/"}, {"content_hash": "11bf68ecf21babb9bd1110a68f9452220894c5c3ad0336d90fe1cf60d07c7d85", "fetched_at": "2026-08-29T12:58:33.458238+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/about"}, {"content_hash": "904fb830a44672c0af6c49f54adf2c1c6d1849e2ec4fd558cf67aa496ad4d1de", "fetched_at": "2026-08-29T12:58:33.460404+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/cve-2025-68921"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T06:56:49.319394+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1d76b5910f73f527d856c55b84104f1490f7fcd6fbdc28ec69f8413037745b1c", "fetched_at": "2026-08-28T04:03:25.874543+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ZeroMemoryEx/Terminator"}, {"content_hash": "2eb084781ed2d05cfb057040bb471bfeb5b6822fb36c116196eee718cef29224", "fetched_at": "2026-08-29T12:58:33.455088+00:00", "kind": "homepage", "missing": false, "url": "https://www.hackandhide.com/the-story-behind-blackout-abusing-gmer-driver-to-terminate-protected-processes/"}, {"content_hash": "11bf68ecf21babb9bd1110a68f9452220894c5c3ad0336d90fe1cf60d07c7d85", "fetched_at": "2026-08-29T12:58:33.458238+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/about"}, {"content_hash": "904fb830a44672c0af6c49f54adf2c1c6d1849e2ec4fd558cf67aa496ad4d1de", "fetched_at": "2026-08-29T12:58:33.460404+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/cve-2025-68921"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T06:56:49.319394+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1d76b5910f73f527d856c55b84104f1490f7fcd6fbdc28ec69f8413037745b1c", "fetched_at": "2026-08-28T04:03:25.874543+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ZeroMemoryEx/Terminator"}, {"content_hash": "2eb084781ed2d05cfb057040bb471bfeb5b6822fb36c116196eee718cef29224", "fetched_at": "2026-08-29T12:58:33.455088+00:00", "kind": "homepage", "missing": false, "url": "https://www.hackandhide.com/the-story-behind-blackout-abusing-gmer-driver-to-terminate-protected-processes/"}, {"content_hash": "11bf68ecf21babb9bd1110a68f9452220894c5c3ad0336d90fe1cf60d07c7d85", "fetched_at": "2026-08-29T12:58:33.458238+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/about"}, {"content_hash": "904fb830a44672c0af6c49f54adf2c1c6d1849e2ec4fd558cf67aa496ad4d1de", "fetched_at": "2026-08-29T12:58:33.460404+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/cve-2025-68921"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T06:56:49.319394+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1d76b5910f73f527d856c55b84104f1490f7fcd6fbdc28ec69f8413037745b1c", "fetched_at": "2026-08-28T04:03:25.874543+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ZeroMemoryEx/Terminator"}, {"content_hash": "2eb084781ed2d05cfb057040bb471bfeb5b6822fb36c116196eee718cef29224", "fetched_at": "2026-08-29T12:58:33.455088+00:00", "kind": "homepage", "missing": false, "url": "https://www.hackandhide.com/the-story-behind-blackout-abusing-gmer-driver-to-terminate-protected-processes/"}, {"content_hash": "11bf68ecf21babb9bd1110a68f9452220894c5c3ad0336d90fe1cf60d07c7d85", "fetched_at": "2026-08-29T12:58:33.458238+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/about"}, {"content_hash": "904fb830a44672c0af6c49f54adf2c1c6d1849e2ec4fd558cf67aa496ad4d1de", "fetched_at": "2026-08-29T12:58:33.460404+00:00", "kind": "site_page", "missing": false, "url": "https://www.hackandhide.com/cve-2025-68921"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 0, "longevity": 84, "rhythm": 8}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": ["no_license"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 1185, "days_push": 1170, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 20, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}