712 indexed
LOLBINLiving-off-the-land binaries
712 binaries that adversaries abuse for malicious purposes — LOLBAS (Windows) + GTFOBins (Unix). Filter by platform. Authored by Adam Lundqvist.
Showing 551–600 of 712 · page 12 of 15
| ID | Title | Summary |
|---|---|---|
| split | split Unix | split is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write, shell. Mapped ATT&CK techniques (per … |
| Sqldumper.exe | Sqldumper.exe Windows | Sqldumper.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Dump. Mapped ATT&CK techniques (per LOLBAS … |
| sqlite3 | sqlite3 Unix | sqlite3 is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write, shell. Mapped ATT&CK techniques (pe… |
| sqlmap | sqlmap Unix | sqlmap is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → … |
| Sqlps.exe | Sqlps.exe Windows | Sqlps.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS /… |
| SQLToolsPS.exe | SQLToolsPS.exe Windows | SQLToolsPS.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOL… |
| Squirrel.exe | Squirrel.exe Windows | Squirrel.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download, AWL Bypass, Execute. Mapped ATT&CK… |
| ss | ss Unix | ss is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MI… |
| ssh | ssh Unix | ssh is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: download, file-read, shell, upload. Mapped ATT&CK techniques (… |
| ssh-agent | ssh-agent Unix | ssh-agent is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins →… |
| ssh-copy-id | ssh-copy-id Unix | ssh-copy-id is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write. Mapped ATT&CK techniques (per L… |
| ssh-keygen | ssh-keygen Unix | ssh-keygen is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: library-load. Mapped ATT&CK techniques (per LOLBAS / GT… |
| ssh-keyscan | ssh-keyscan Unix | ssh-keyscan is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFO… |
| ssh.exe | ssh.exe Windows | ssh.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS / G… |
| sshfs | sshfs Unix | sshfs is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: command, download, shell, upload. Mapped ATT&CK techniques (… |
| sshpass | sshpass Unix | sshpass is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| sshuttle | sshuttle Unix | sshuttle is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → … |
| start-stop-daemon | start-stop-daemon Unix | start-stop-daemon is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GT… |
| stdbuf | stdbuf Unix | stdbuf is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MI… |
| Stordiag.exe | Stordiag.exe Windows | Stordiag.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBA… |
| strace | strace Unix | strace is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-write, shell. Mapped ATT&CK techniques (per LOLBAS / G… |
| strings | strings Unix | strings is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins… |
| su | su Unix | su is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITRE … |
| sudo | sudo Unix | sudo is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITR… |
| SyncAppvPublishingServer.exe | SyncAppvPublishingServer.exe Windows | SyncAppvPublishingServer.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techn… |
| Syncappvpublishingserver.vbs | Syncappvpublishingserver.vbs Windows | Syncappvpublishingserver.vbs is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techn… |
| sysctl | sysctl Unix | sysctl is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: command, file-read. Mapped ATT&CK techniques (per LOLBAS / … |
| Syssetup.dll | Syssetup.dll Windows | Syssetup.dll is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: AWL Bypass, Execute. Mapped ATT&CK technique… |
| systemctl | systemctl Unix | systemctl is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit, shell. Mapped ATT&CK techniques (per LOLBAS / G… |
| systemd-resolve | systemd-resolve Unix | systemd-resolve is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit. Mapped ATT&CK techniques (per LOLBAS / GT… |
| systemd-run | systemd-run Unix | systemd-run is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: command, shell. Mapped ATT&CK techniques (per LOLBAS /… |
| tac | tac Unix | tac is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| tail | tail Unix | tail is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → … |
| tailscale | tailscale Unix | tailscale is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: upload. Mapped ATT&CK techniques (per LOLBAS / GTFOBins … |
| tar | tar Unix | tar is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: download, file-read, file-write, shell, upload. Mapped ATT&CK … |
| Tar.exe | Tar.exe Windows | Tar.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: ADS, Copy. Mapped ATT&CK techniques (per LOLBAS /… |
| task | task Unix | task is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITR… |
| taskset | taskset Unix | taskset is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| tasksh | tasksh Unix | tasksh is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MI… |
| tbl | tbl Unix | tbl is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| tclsh | tclsh Unix | tclsh is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: library-load, reverse-shell, shell. Mapped ATT&CK techniques… |
| tcpdump | tcpdump Unix | tcpdump is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: command, file-write. Mapped ATT&CK techniques (per LOLBAS … |
| tcsh | tcsh Unix | tcsh is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-write, shell. Mapped ATT&CK techniques (per LOLBAS / GTF… |
| tdbtool | tdbtool Unix | tdbtool is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| te.exe | te.exe Windows | te.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS / GT… |
| Teams.exe | Teams.exe Windows | Teams.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS /… |
| tee | tee Unix | tee is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-write. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → … |
| telnet | telnet Unix | telnet is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: reverse-shell, shell. Mapped ATT&CK techniques (per LOLBAS … |
| terraform | terraform Unix | terraform is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBi… |
| TestWindowRemoteAgent.exe | TestWindowRemoteAgent.exe Windows | TestWindowRemoteAgent.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Upload. Mapped ATT&CK technique… |