712 indexed
LOLBINLiving-off-the-land binaries
712 binaries that adversaries abuse for malicious purposes — LOLBAS (Windows) + GTFOBins (Unix). Filter by platform. Authored by Adam Lundqvist.
Showing 1–50 of 712 · page 1 of 15
| ID | Title | Summary |
|---|---|---|
| 7z | 7z Unix | 7z is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MI… |
| aa-exec | aa-exec Unix | aa-exec is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| ab | ab Unix | ab is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: download, upload. Mapped ATT&CK techniques (per LOLBAS / GTFOBi… |
| AccCheckConsole.exe | AccCheckConsole.exe Windows | AccCheckConsole.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, AWL Bypass. Mapped ATT&CK te… |
| acr | acr Unix | acr is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: command. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MIT… |
| AddinUtil.exe | AddinUtil.exe Windows | AddinUtil.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLB… |
| adplus.exe | adplus.exe Windows | adplus.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Dump, Execute. Mapped ATT&CK techniques (per L… |
| Advpack.dll | Advpack.dll Windows | Advpack.dll is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: AWL Bypass, Execute. Mapped ATT&CK techniques… |
| AgentExecutor.exe | AgentExecutor.exe Windows | AgentExecutor.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per … |
| agetty | agetty Unix | agetty is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MI… |
| alpine | alpine Unix | alpine is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins … |
| ansible-playbook | ansible-playbook Unix | ansible-playbook is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTF… |
| ansible-test | ansible-test Unix | ansible-test is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBin… |
| aoss | aoss Unix | aoss is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITR… |
| apache2 | apache2 Unix | apache2 is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins… |
| apache2ctl | apache2ctl Unix | apache2ctl is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOB… |
| AppCert.exe | AppCert.exe Windows | AppCert.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS… |
| AppInstaller.exe | AppInstaller.exe Windows | AppInstaller.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per … |
| AppLauncher.exe | AppLauncher.exe Windows | AppLauncher.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LO… |
| apport-cli | apport-cli Unix | apport-cli is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit. Mapped ATT&CK techniques (per LOLBAS / GTFOBin… |
| Appvlp.exe | Appvlp.exe Windows | Appvlp.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS … |
| apt | apt Unix | apt is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: no documented abuse functions. Mapped ATT&CK techniques (per L… |
| apt-get | apt-get Unix | apt-get is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit, shell. Mapped ATT&CK techniques (per LOLBAS / GTF… |
| aptitude | aptitude Unix | aptitude is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit. Mapped ATT&CK techniques (per LOLBAS / GTFOBins … |
| ar | ar Unix | ar is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MI… |
| arch-nspawn | arch-nspawn Unix | arch-nspawn is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins… |
| aria2c | aria2c Unix | aria2c is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: command, download, file-read. Mapped ATT&CK techniques (per… |
| arj | arj Unix | arj is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write. Mapped ATT&CK techniques (per LOLBAS / … |
| arp | arp Unix | arp is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| as | as Unix | as is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MI… |
| ascii-xfr | ascii-xfr Unix | ascii-xfr is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBi… |
| ascii85 | ascii85 Unix | ascii85 is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins… |
| ash | ash Unix | ash is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-write, shell. Mapped ATT&CK techniques (per LOLBAS / GTFO… |
| aspell | aspell Unix | aspell is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins … |
| Aspnet_Compiler.exe | Aspnet_Compiler.exe Windows | Aspnet_Compiler.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: AWL Bypass. Mapped ATT&CK techniques … |
| asterisk | asterisk Unix | asterisk is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → … |
| at | at Unix | at is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: command, shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins… |
| At.exe | At.exe Windows | At.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS / GT… |
| Atbroker.exe | Atbroker.exe Windows | Atbroker.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBA… |
| atobm | atobm Unix | atobm is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins →… |
| autoconf | autoconf Unix | autoconf is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → … |
| autoheader | autoheader Unix | autoheader is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins … |
| autoreconf | autoreconf Unix | autoreconf is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins … |
| awk | awk Unix | awk is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: no documented abuse functions. Mapped ATT&CK techniques (per L… |
| aws | aws Unix | aws is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, inherit. Mapped ATT&CK techniques (per LOLBAS / GTF… |
| base32 | base32 Unix | base32 is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins … |
| base58 | base58 Unix | base58 is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins … |
| base64 | base64 Unix | base64 is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins … |
| basenc | basenc Unix | basenc is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins … |
| basez | basez Unix | basez is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins →… |