712 indexed
LOLBINLiving-off-the-land binaries
712 binaries that adversaries abuse for malicious purposes — LOLBAS (Windows) + GTFOBins (Unix). Filter by platform. Authored by Adam Lundqvist.
Showing 451–500 of 712 · page 10 of 15
| ID | Title | Summary |
|---|---|---|
| Procdump.exe | Procdump.exe Windows | Procdump.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBA… |
| procmail | procmail Unix | procmail is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: command. Mapped ATT&CK techniques (per LOLBAS / GTFOBins … |
| ProtocolHandler.exe | ProtocolHandler.exe Windows | ProtocolHandler.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (p… |
| Provlaunch.exe | Provlaunch.exe Windows | Provlaunch.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOL… |
| pry | pry Unix | pry is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MIT… |
| psftp | psftp Unix | psftp is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MIT… |
| psql | psql Unix | psql is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit, shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBi… |
| Psr.exe | Psr.exe Windows | Psr.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Reconnaissance. Mapped ATT&CK techniques (per LOL… |
| ptx | ptx Unix | ptx is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| Pubprn.vbs | Pubprn.vbs Windows | Pubprn.vbs is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS … |
| puppet | puppet Unix | puppet is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write, shell. Mapped ATT&CK techniques (per… |
| pwsh | pwsh Unix | pwsh is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-write, shell. Mapped ATT&CK techniques (per LOLBAS / GTF… |
| pygmentize | pygmentize Unix | pygmentize is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOB… |
| pyright | pyright Unix | pyright is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins… |
| python | python Unix | python is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: download, file-read, file-write, library-load, reverse-shel… |
| qpdf | qpdf Unix | qpdf is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → … |
| Query.exe | Query.exe Windows | Query.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS /… |
| R | R Unix | R is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITRE c… |
| rake | rake Unix | rake is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, inherit. Mapped ATT&CK techniques (per LOLBAS / GT… |
| ranger | ranger Unix | ranger is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MI… |
| Rasautou.exe | Rasautou.exe Windows | Rasautou.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBA… |
| rc | rc Unix | rc is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITRE … |
| rcsi.exe | rcsi.exe Windows | rcsi.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, AWL Bypass. Mapped ATT&CK techniques (p… |
| rdrleakdiag.exe | rdrleakdiag.exe Windows | rdrleakdiag.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Dump. Mapped ATT&CK techniques (per LOLBA… |
| readelf | readelf Unix | readelf is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins… |
| red | red Unix | red is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: no documented abuse functions. Mapped ATT&CK techniques (per L… |
| redcarpet | redcarpet Unix | redcarpet is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBi… |
| redis | redis Unix | redis is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-write. Mapped ATT&CK techniques (per LOLBAS / GTFOBins … |
| Reg.exe | Reg.exe Windows | Reg.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: ADS, Credentials. Mapped ATT&CK techniques (per L… |
| Regasm.exe | Regasm.exe Windows | Regasm.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: AWL Bypass, Execute. Mapped ATT&CK techniques … |
| Regedit.exe | Regedit.exe Windows | Regedit.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: ADS. Mapped ATT&CK techniques (per LOLBAS / G… |
| Regini.exe | Regini.exe Windows | Regini.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: ADS. Mapped ATT&CK techniques (per LOLBAS / GT… |
| Register-cimprovider.exe | Register-cimprovider.exe Windows | Register-cimprovider.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK technique… |
| Regsvcs.exe | Regsvcs.exe Windows | Regsvcs.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, AWL Bypass. Mapped ATT&CK techniques… |
| Regsvr32.exe | Regsvr32.exe Windows | Regsvr32.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: AWL Bypass, Execute. Mapped ATT&CK technique… |
| Remote.exe | Remote.exe Windows | Remote.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: AWL Bypass, Execute. Mapped ATT&CK techniques … |
| Replace.exe | Replace.exe Windows | Replace.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Copy, Download. Mapped ATT&CK techniques (per… |
| Reset.exe | Reset.exe Windows | Reset.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS /… |
| restic | restic Unix | restic is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: command, shell, upload. Mapped ATT&CK techniques (per LOLBA… |
| rev | rev Unix | rev is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| rlogin | rlogin Unix | rlogin is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: upload. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| rlwrap | rlwrap Unix | rlwrap is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-write, shell. Mapped ATT&CK techniques (per LOLBAS / G… |
| Rpcping.exe | Rpcping.exe Windows | Rpcping.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Credentials. Mapped ATT&CK techniques (per LO… |
| rpm | rpm Unix | rpm is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: command, inherit, shell. Mapped ATT&CK techniques (per LOLBAS … |
| rpmdb | rpmdb Unix | rpmdb is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit, shell. Mapped ATT&CK techniques (per LOLBAS / GTFOB… |
| rpmquery | rpmquery Unix | rpmquery is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit, shell. Mapped ATT&CK techniques (per LOLBAS / GT… |
| rpmverify | rpmverify Unix | rpmverify is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit, shell. Mapped ATT&CK techniques (per LOLBAS / G… |
| rsync | rsync Unix | rsync is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MIT… |
| rsyslogd | rsyslogd Unix | rsyslogd is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: command. Mapped ATT&CK techniques (per LOLBAS / GTFOBins … |
| rtorrent | rtorrent Unix | rtorrent is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → … |