712 indexed
LOLBINLiving-off-the-land binaries
712 binaries that adversaries abuse for malicious purposes — LOLBAS (Windows) + GTFOBins (Unix). Filter by platform. Authored by Adam Lundqvist.
Showing 51–100 of 712 · page 2 of 15
| ID | Title | Summary |
|---|---|---|
| bash | bash Unix | bash is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: download, file-read, file-write, library-load, reverse-shell,… |
| Bash.exe | Bash.exe Windows | Bash.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, AWL Bypass. Mapped ATT&CK techniques (p… |
| bashbug | bashbug Unix | bashbug is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit. Mapped ATT&CK techniques (per LOLBAS / GTFOBins →… |
| batcat | batcat Unix | batcat is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → … |
| bbot | bbot Unix | bbot is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → … |
| bc | bc Unix | bc is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MI… |
| bconsole | bconsole Unix | bconsole is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, shell. Mapped ATT&CK techniques (per LOLBAS / … |
| Bcp.exe | Bcp.exe Windows | Bcp.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per LOLBAS / … |
| bee | bee Unix | bee is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MIT… |
| Bginfo.exe | Bginfo.exe Windows | Bginfo.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, AWL Bypass. Mapped ATT&CK techniques … |
| Bitsadmin.exe | Bitsadmin.exe Windows | Bitsadmin.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: ADS, Download, Copy, Execute. Mapped ATT&CK… |
| borg | borg Unix | borg is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITR… |
| bpftrace | bpftrace Unix | bpftrace is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → … |
| bridge | bridge Unix | bridge is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins … |
| bundle | bundle Unix | bundle is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit, shell. Mapped ATT&CK techniques (per LOLBAS / GTFO… |
| bundler | bundler Unix | bundler is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: no documented abuse functions. Mapped ATT&CK techniques (p… |
| busctl | busctl Unix | busctl is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit, shell. Mapped ATT&CK techniques (per LOLBAS / GTFO… |
| busybox | busybox Unix | busybox is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit, reverse-shell, upload. Mapped ATT&CK techniques (… |
| byebug | byebug Unix | byebug is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → … |
| bzip2 | bzip2 Unix | bzip2 is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins →… |
| c89 | c89 Unix | c89 is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: no documented abuse functions. Mapped ATT&CK techniques (per L… |
| c99 | c99 Unix | c99 is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: no documented abuse functions. Mapped ATT&CK techniques (per L… |
| cabal | cabal Unix | cabal is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MIT… |
| cancel | cancel Unix | cancel is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: upload. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| capsh | capsh Unix | capsh is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MIT… |
| cargo | cargo Unix | cargo is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| cat | cat Unix | cat is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| cc | cc Unix | cc is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: no documented abuse functions. Mapped ATT&CK techniques (per LO… |
| Cdb.exe | Cdb.exe Windows | Cdb.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS / G… |
| cdist | cdist Unix | cdist is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MIT… |
| certbot | certbot Unix | certbot is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| CertOC.exe | CertOC.exe Windows | CertOC.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, Download. Mapped ATT&CK techniques (p… |
| CertReq.exe | CertReq.exe Windows | CertReq.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download, Upload. Mapped ATT&CK techniques (p… |
| Certutil.exe | Certutil.exe Windows | Certutil.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download, ADS, Encode, Decode. Mapped ATT&CK… |
| Change.exe | Change.exe Windows | Change.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS … |
| chattr | chattr Unix | chattr is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: privilege-escalation. Mapped ATT&CK techniques (per LOLBAS … |
| check_by_ssh | check_by_ssh Unix | check_by_ssh is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBin… |
| check_cups | check_cups Unix | check_cups is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOB… |
| check_log | check_log Unix | check_log is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write. Mapped ATT&CK techniques (per LOL… |
| check_memory | check_memory Unix | check_memory is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTF… |
| check_raid | check_raid Unix | check_raid is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOB… |
| check_ssl_cert | check_ssl_cert Unix | check_ssl_cert is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOB… |
| check_statusfile | check_statusfile Unix | check_statusfile is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS /… |
| chmod | chmod Unix | chmod is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: privilege-escalation. Mapped ATT&CK techniques (per LOLBAS /… |
| choom | choom Unix | choom is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MIT… |
| chown | chown Unix | chown is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: privilege-escalation. Mapped ATT&CK techniques (per LOLBAS /… |
| chroot | chroot Unix | chroot is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MI… |
| chrt | chrt Unix | chrt is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITR… |
| Cipher.exe | Cipher.exe Windows | Cipher.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Tamper. Mapped ATT&CK techniques (per LOLBAS /… |
| CL_Invocation.ps1 | CL_Invocation.ps1 Windows | CL_Invocation.ps1 is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per … |