| description |
|---|
Description of the '.kill' command in HyperDbg. |
.kill
.kill
Terminates the currently active process (the previously started process using the '.start' or the '.attach' commands).
None
Imagine we want to terminate a previously started program using the '.start' command.
0: kHyperDbg> .kill
The IOCTL description is the same as the '.start' command, but instead of Action, you should send DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_KILL_PROCESS.
This command will continue the debuggee for some time (in Debugger Mode). This means that you lose the current context (registers & memory) after executing this command.
None
.restart (restart the process)
.detach (detach from the process)
.switch (show the list and switch between active debugging threads)