self-destruct command to stop and delete implant from disk
Author: skoveitCreated Apr 17, 2026Updated Jun 23, 2026
Labelsenhancement
Is your feature request related to a problem? Please describe. no
Describe the solution you'd like A self-destruct command that stops the implant process and deletes its executable from disk. It will rename the default data stream then delete it to avoid Windows kernel lock on NTFS, then exit.
Describe alternatives you've considered
Additional context I'm happy to open a PR for this
Source: BishopFox/sliver