712 indexed
LOLBINLiving-off-the-land binaries
712 binaries that adversaries abuse for malicious purposes — LOLBAS (Windows) + GTFOBins (Unix). Filter by platform. Authored by Adam Lundqvist.
Showing 101–150 of 712 · page 3 of 15
| ID | Title | Summary |
|---|---|---|
| CL_LoadAssembly.ps1 | CL_LoadAssembly.ps1 Windows | CL_LoadAssembly.ps1 is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (pe… |
| CL_Mutexverifiers.ps1 | CL_Mutexverifiers.ps1 Windows | CL_Mutexverifiers.ps1 is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (… |
| clamscan | clamscan Unix | clamscan is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBin… |
| clisp | clisp Unix | clisp is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MIT… |
| cmake | cmake Unix | cmake is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, shell. Mapped ATT&CK techniques (per LOLBAS / GTF… |
| Cmd.exe | Cmd.exe Windows | Cmd.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: ADS, Download, Upload. Mapped ATT&CK techniques (… |
| Cmdkey.exe | Cmdkey.exe Windows | Cmdkey.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Credentials. Mapped ATT&CK techniques (per LOL… |
| cmdl32.exe | cmdl32.exe Windows | cmdl32.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per LOLBAS… |
| cmp | cmp Unix | cmp is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| Cmstp.exe | Cmstp.exe Windows | Cmstp.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, AWL Bypass. Mapped ATT&CK techniques (… |
| cobc | cobc Unix | cobc is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITR… |
| code | code Unix | code is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: download, reverse-shell, upload. Mapped ATT&CK techniques (pe… |
| codex | codex Unix | codex is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MIT… |
| Colorcpl.exe | Colorcpl.exe Windows | Colorcpl.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Copy. Mapped ATT&CK techniques (per LOLBAS /… |
| column | column Unix | column is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins … |
| comm | comm Unix | comm is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → … |
| composer | composer Unix | composer is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → … |
| ComputerDefaults.exe | ComputerDefaults.exe Windows | ComputerDefaults.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: UAC Bypass. Mapped ATT&CK techniques… |
| Comsvcs.dll | Comsvcs.dll Windows | Comsvcs.dll is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Dump. Mapped ATT&CK techniques (per LOLBAS / … |
| ConfigSecurityPolicy.exe | ConfigSecurityPolicy.exe Windows | ConfigSecurityPolicy.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Upload, Download. Mapped ATT&CK … |
| Conhost.exe | Conhost.exe Windows | Conhost.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS… |
| Control.exe | Control.exe Windows | Control.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: ADS, Execute. Mapped ATT&CK techniques (per L… |
| coregen.exe | coregen.exe Windows | coregen.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, AWL Bypass. Mapped ATT&CK techniques… |
| cowsay | cowsay Unix | cowsay is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → … |
| cowthink | cowthink Unix | cowthink is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit. Mapped ATT&CK techniques (per LOLBAS / GTFOBins … |
| cp | cp Unix | cp is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write, privilege-escalation. Mapped ATT&CK tech… |
| cpan | cpan Unix | cpan is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MI… |
| cpio | cpio Unix | cpio is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write, shell. Mapped ATT&CK techniques (per L… |
| cpulimit | cpulimit Unix | cpulimit is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → … |
| crash | crash Unix | crash is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: command, inherit. Mapped ATT&CK techniques (per LOLBAS / GTF… |
| Createdump.exe | Createdump.exe Windows | Createdump.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Dump. Mapped ATT&CK techniques (per LOLBAS… |
| crontab | crontab Unix | crontab is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: command, inherit. Mapped ATT&CK techniques (per LOLBAS / G… |
| Csc.exe | Csc.exe Windows | Csc.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Compile. Mapped ATT&CK techniques (per LOLBAS / G… |
| Cscript.exe | Cscript.exe Windows | Cscript.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: ADS. Mapped ATT&CK techniques (per LOLBAS / G… |
| csh | csh Unix | csh is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-write, shell. Mapped ATT&CK techniques (per LOLBAS / GTFO… |
| csi.exe | csi.exe Windows | csi.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS / G… |
| csplit | csplit Unix | csplit is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write. Mapped ATT&CK techniques (per LOLBAS… |
| csvtool | csvtool Unix | csvtool is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write, shell. Mapped ATT&CK techniques (pe… |
| ctr | ctr Unix | ctr is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITRE… |
| cupsfilter | cupsfilter Unix | cupsfilter is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOB… |
| curl | curl Unix | curl is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: download, file-read, file-write, library-load, upload. Mapped… |
| CustomShellHost.exe | CustomShellHost.exe Windows | CustomShellHost.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (pe… |
| cut | cut Unix | cut is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| dash | dash Unix | dash is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-write, shell. Mapped ATT&CK techniques (per LOLBAS / GTF… |
| DataSvcUtil.exe | DataSvcUtil.exe Windows | DataSvcUtil.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Upload. Mapped ATT&CK techniques (per LOL… |
| date | date Unix | date is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → … |
| dc | dc Unix | dc is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITRE … |
| dd | dd Unix | dd is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write. Mapped ATT&CK techniques (per LOLBAS / G… |
| debugfs | debugfs Unix | debugfs is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| DefaultPack.EXE | DefaultPack.EXE Windows | DefaultPack.EXE is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LO… |