712 indexed
LOLBINLiving-off-the-land binaries
712 binaries that adversaries abuse for malicious purposes — LOLBAS (Windows) + GTFOBins (Unix). Filter by platform. Authored by Adam Lundqvist.
Showing 51–100 of 234 in Windows · page 2 of 5
| ID | Title | Summary |
|---|---|---|
| Dfsvc.exe | Dfsvc.exe Windows | Dfsvc.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: AWL Bypass. Mapped ATT&CK techniques (per LOLBA… |
| Diantz.exe | Diantz.exe Windows | Diantz.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: ADS, Download, Execute. Mapped ATT&CK techniqu… |
| Diskshadow.exe | Diskshadow.exe Windows | Diskshadow.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Dump, Execute. Mapped ATT&CK techniques (p… |
| Dnscmd.exe | Dnscmd.exe Windows | Dnscmd.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS … |
| dnx.exe | dnx.exe Windows | dnx.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS / G… |
| Dotnet.exe | Dotnet.exe Windows | Dotnet.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: AWL Bypass, Execute. Mapped ATT&CK techniques … |
| dsdbutil.exe | dsdbutil.exe Windows | dsdbutil.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Dump. Mapped ATT&CK techniques (per LOLBAS /… |
| dtutil.exe | dtutil.exe Windows | dtutil.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Copy. Mapped ATT&CK techniques (per LOLBAS / G… |
| Dump64.exe | Dump64.exe Windows | Dump64.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Dump. Mapped ATT&CK techniques (per LOLBAS / G… |
| DumpMinitool.exe | DumpMinitool.exe Windows | DumpMinitool.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Dump. Mapped ATT&CK techniques (per LOLB… |
| Dxcap.exe | Dxcap.exe Windows | Dxcap.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS /… |
| ECMangen.exe | ECMangen.exe Windows | ECMangen.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per LOLB… |
| Esentutl.exe | Esentutl.exe Windows | Esentutl.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Copy, ADS, Download. Mapped ATT&CK technique… |
| Eudcedit.exe | Eudcedit.exe Windows | Eudcedit.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: UAC Bypass. Mapped ATT&CK techniques (per LO… |
| Eventvwr.exe | Eventvwr.exe Windows | Eventvwr.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: UAC Bypass. Mapped ATT&CK techniques (per LO… |
| Excel.exe | Excel.exe Windows | Excel.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per LOLBAS … |
| Expand.exe | Expand.exe Windows | Expand.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download, Copy, ADS. Mapped ATT&CK techniques … |
| Explorer.exe | Explorer.exe Windows | Explorer.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBA… |
| Extexport.exe | Extexport.exe Windows | Extexport.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLB… |
| Extrac32.exe | Extrac32.exe Windows | Extrac32.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: ADS, Download, Copy. Mapped ATT&CK technique… |
| Findstr.exe | Findstr.exe Windows | Findstr.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: ADS, Credentials, Download. Mapped ATT&CK tec… |
| Finger.exe | Finger.exe Windows | Finger.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per LOLBAS… |
| fltMC.exe | fltMC.exe Windows | fltMC.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Tamper. Mapped ATT&CK techniques (per LOLBAS / … |
| Forfiles.exe | Forfiles.exe Windows | Forfiles.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, ADS. Mapped ATT&CK techniques (per … |
| Fsi.exe | Fsi.exe Windows | Fsi.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: AWL Bypass. Mapped ATT&CK techniques (per LOLBAS … |
| FsiAnyCpu.exe | FsiAnyCpu.exe Windows | FsiAnyCpu.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: AWL Bypass. Mapped ATT&CK techniques (per L… |
| Fsutil.exe | Fsutil.exe Windows | Fsutil.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Tamper, Execute. Mapped ATT&CK techniques (per… |
| Ftp.exe | Ftp.exe Windows | Ftp.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, Download. Mapped ATT&CK techniques (per … |
| Gpscript.exe | Gpscript.exe Windows | Gpscript.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBA… |
| Hh.exe | Hh.exe Windows | Hh.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download, Execute. Mapped ATT&CK techniques (per L… |
| Ie4uinit.exe | Ie4uinit.exe Windows | Ie4uinit.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBA… |
| Ieadvpack.dll | Ieadvpack.dll Windows | Ieadvpack.dll is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: AWL Bypass, Execute. Mapped ATT&CK techniqu… |
| iediagcmd.exe | iediagcmd.exe Windows | iediagcmd.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLB… |
| Ieexec.exe | Ieexec.exe Windows | Ieexec.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download, Execute. Mapped ATT&CK techniques (p… |
| Ieframe.dll | Ieframe.dll Windows | Ieframe.dll is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS… |
| Ilasm.exe | Ilasm.exe Windows | Ilasm.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Compile. Mapped ATT&CK techniques (per LOLBAS /… |
| IMEWDBLD.exe | IMEWDBLD.exe Windows | IMEWDBLD.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per LOLB… |
| Infdefaultinstall.exe | Infdefaultinstall.exe Windows | Infdefaultinstall.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (… |
| Installutil.exe | Installutil.exe Windows | Installutil.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: AWL Bypass, Execute, Download. Mapped ATT… |
| IntelliTrace.exe | IntelliTrace.exe Windows | IntelliTrace.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per L… |
| iscsicpl.exe | iscsicpl.exe Windows | iscsicpl.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: UAC Bypass. Mapped ATT&CK techniques (per LO… |
| Jsc.exe | Jsc.exe Windows | Jsc.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Compile. Mapped ATT&CK techniques (per LOLBAS / G… |
| Launch-VsDevShell.ps1 | Launch-VsDevShell.ps1 Windows | Launch-VsDevShell.ps1 is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (… |
| Ldifde.exe | Ldifde.exe Windows | Ldifde.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per LOLBAS… |
| Logger.exe | Logger.exe Windows | Logger.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS … |
| Makecab.exe | Makecab.exe Windows | Makecab.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: ADS, Download, Execute. Mapped ATT&CK techniq… |
| Manage-bde.wsf | Manage-bde.wsf Windows | Manage-bde.wsf is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOL… |
| Mavinject.exe | Mavinject.exe Windows | Mavinject.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, ADS. Mapped ATT&CK techniques (per… |
| Mftrace.exe | Mftrace.exe Windows | Mftrace.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS… |
| Microsoft.NodejsTools.PressAnyKey.exe | Microsoft.NodejsTools.PressAnyKey.exe Windows | Microsoft.NodejsTools.PressAnyKey.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT… |