712 indexed
LOLBINLiving-off-the-land binaries
712 binaries that adversaries abuse for malicious purposes — LOLBAS (Windows) + GTFOBins (Unix). Filter by platform. Authored by Adam Lundqvist.
Showing 501–550 of 712 · page 11 of 15
| ID | Title | Summary |
|---|---|---|
| ruby | ruby Unix | ruby is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: download, file-read, file-write, library-load, reverse-shell,… |
| run-mailcap | run-mailcap Unix | run-mailcap is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit. Mapped ATT&CK techniques (per LOLBAS / GTFOBi… |
| run-parts | run-parts Unix | run-parts is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins →… |
| Rundll32.exe | Rundll32.exe Windows | Rundll32.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, ADS. Mapped ATT&CK techniques (per … |
| Runexehelper.exe | Runexehelper.exe Windows | Runexehelper.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per L… |
| Runonce.exe | Runonce.exe Windows | Runonce.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS… |
| runscript | runscript Unix | runscript is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins →… |
| Runscripthelper.exe | Runscripthelper.exe Windows | Runscripthelper.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (pe… |
| rustc | rustc Unix | rustc is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write, inherit. Mapped ATT&CK techniques (pe… |
| rustdoc | rustdoc Unix | rustdoc is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write. Mapped ATT&CK techniques (per LOLBA… |
| rustfmt | rustfmt Unix | rustfmt is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins… |
| rustup | rustup Unix | rustup is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: command, shell. Mapped ATT&CK techniques (per LOLBAS / GTFO… |
| rview | rview Unix | rview is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: no documented abuse functions. Mapped ATT&CK techniques (per… |
| rvim | rvim Unix | rvim is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: no documented abuse functions. Mapped ATT&CK techniques (per … |
| sash | sash Unix | sash is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITR… |
| Sc.exe | Sc.exe Windows | Sc.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: ADS. Mapped ATT&CK techniques (per LOLBAS / GTFOBi… |
| scanmem | scanmem Unix | scanmem is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| Schtasks.exe | Schtasks.exe Windows | Schtasks.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBA… |
| scp | scp Unix | scp is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: download, shell, upload. Mapped ATT&CK techniques (per LOLBAS … |
| screen | screen Unix | screen is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-write, shell. Mapped ATT&CK techniques (per LOLBAS / G… |
| script | script Unix | script is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-write, shell. Mapped ATT&CK techniques (per LOLBAS / G… |
| Scriptrunner.exe | Scriptrunner.exe Windows | Scriptrunner.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per L… |
| Scrobj.dll | Scrobj.dll Windows | Scrobj.dll is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per LOLBAS… |
| scrot | scrot Unix | scrot is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MIT… |
| sed | sed Unix | sed is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write, shell. Mapped ATT&CK techniques (per LO… |
| service | service Unix | service is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| setarch | setarch Unix | setarch is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| setcap | setcap Unix | setcap is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: privilege-escalation. Mapped ATT&CK techniques (per LOLBAS … |
| setfacl | setfacl Unix | setfacl is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: privilege-escalation. Mapped ATT&CK techniques (per LOLBAS… |
| setlock | setlock Unix | setlock is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| Setres.exe | Setres.exe Windows | Setres.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS … |
| SettingSyncHost.exe | SettingSyncHost.exe Windows | SettingSyncHost.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (pe… |
| Setupapi.dll | Setupapi.dll Windows | Setupapi.dll is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: AWL Bypass, Execute. Mapped ATT&CK technique… |
| sftp | sftp Unix | sftp is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: download, shell, upload. Mapped ATT&CK techniques (per LOLBAS… |
| Sftp.exe | Sftp.exe Windows | Sftp.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS / … |
| sg | sg Unix | sg is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITRE … |
| Shdocvw.dll | Shdocvw.dll Windows | Shdocvw.dll is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS… |
| Shell32.dll | Shell32.dll Windows | Shell32.dll is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS… |
| Shimgvw.dll | Shimgvw.dll Windows | Shimgvw.dll is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per LOLBA… |
| shred | shred Unix | shred is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-write. Mapped ATT&CK techniques (per LOLBAS / GTFOBins … |
| shuf | shuf Unix | shuf is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write. Mapped ATT&CK techniques (per LOLBAS /… |
| Sigverif.exe | Sigverif.exe Windows | Sigverif.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBA… |
| slsh | slsh Unix | slsh is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITR… |
| smbclient | smbclient Unix | smbclient is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: download, shell, upload. Mapped ATT&CK techniques (per L… |
| snap | snap Unix | snap is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: command. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MI… |
| socat | socat Unix | socat is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: bind-shell, download, file-read, file-write, reverse-shell, … |
| socket | socket Unix | socket is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: bind-shell, reverse-shell. Mapped ATT&CK techniques (per LO… |
| soelim | soelim Unix | soelim is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins … |
| softlimit | softlimit Unix | softlimit is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins →… |
| sort | sort Unix | sort is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write. Mapped ATT&CK techniques (per LOLBAS /… |