712 indexed
LOLBINLiving-off-the-land binaries
712 binaries that adversaries abuse for malicious purposes — LOLBAS (Windows) + GTFOBins (Unix). Filter by platform. Authored by Adam Lundqvist.
Showing 101–150 of 234 in Windows · page 3 of 5
| ID | Title | Summary |
|---|---|---|
| Microsoft.Workflow.Compiler.exe | Microsoft.Workflow.Compiler.exe Windows | Microsoft.Workflow.Compiler.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, AWL Bypass. Mapp… |
| Mmc.exe | Mmc.exe Windows | Mmc.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, UAC Bypass, Download. Mapped ATT&CK tech… |
| MpCmdRun.exe | MpCmdRun.exe Windows | MpCmdRun.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download, ADS. Mapped ATT&CK techniques (per… |
| Mpiexec.exe | Mpiexec.exe Windows | Mpiexec.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS… |
| MSAccess.exe | MSAccess.exe Windows | MSAccess.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per LOLB… |
| Msbuild.exe | Msbuild.exe Windows | Msbuild.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: AWL Bypass, Execute. Mapped ATT&CK techniques… |
| Msconfig.exe | Msconfig.exe Windows | Msconfig.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBA… |
| Mscopilot_proxy.exe | Mscopilot_proxy.exe Windows | Mscopilot_proxy.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (pe… |
| Mscopilot.exe | Mscopilot.exe Windows | Mscopilot.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLB… |
| Msdeploy.exe | Msdeploy.exe Windows | Msdeploy.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, AWL Bypass, Copy. Mapped ATT&CK tec… |
| Msdt.exe | Msdt.exe Windows | Msdt.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, AWL Bypass. Mapped ATT&CK techniques (p… |
| msedge_proxy.exe | msedge_proxy.exe Windows | msedge_proxy.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download, Execute. Mapped ATT&CK techniq… |
| Msedge.exe | Msedge.exe Windows | Msedge.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download, Execute. Mapped ATT&CK techniques (p… |
| msedgewebview2.exe | msedgewebview2.exe Windows | msedgewebview2.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per… |
| Mshta.exe | Mshta.exe Windows | Mshta.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, ADS, Download. Mapped ATT&CK technique… |
| Mshtml.dll | Mshtml.dll Windows | Mshtml.dll is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS … |
| Msiexec.exe | Msiexec.exe Windows | Msiexec.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS… |
| MsoHtmEd.exe | MsoHtmEd.exe Windows | MsoHtmEd.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per LOLB… |
| Mspub.exe | Mspub.exe Windows | Mspub.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per LOLBAS … |
| msxsl.exe | msxsl.exe Windows | msxsl.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, AWL Bypass, Download, ADS. Mapped ATT&… |
| Netsh.exe | Netsh.exe Windows | Netsh.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS /… |
| Ngen.exe | Ngen.exe Windows | Ngen.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per LOLBAS /… |
| Nmcap.exe | Nmcap.exe Windows | Nmcap.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Reconnaissance. Mapped ATT&CK techniques (per L… |
| ntdsutil.exe | ntdsutil.exe Windows | ntdsutil.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Dump. Mapped ATT&CK techniques (per LOLBAS /… |
| Ntsd.exe | Ntsd.exe Windows | Ntsd.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS / … |
| odbcad32.exe | odbcad32.exe Windows | odbcad32.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: UAC Bypass. Mapped ATT&CK techniques (per LO… |
| Odbcconf.exe | Odbcconf.exe Windows | Odbcconf.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBA… |
| OfflineScannerShell.exe | OfflineScannerShell.exe Windows | OfflineScannerShell.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques… |
| OneDriveStandaloneUpdater.exe | OneDriveStandaloneUpdater.exe Windows | OneDriveStandaloneUpdater.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK tec… |
| OpenConsole.exe | OpenConsole.exe Windows | OpenConsole.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LO… |
| Pcalua.exe | Pcalua.exe Windows | Pcalua.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS … |
| Pcwrun.exe | Pcwrun.exe Windows | Pcwrun.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS … |
| Pcwutl.dll | Pcwutl.dll Windows | Pcwutl.dll is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS … |
| Pester.bat | Pester.bat Windows | Pester.bat is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS … |
| PhotoViewer.dll | PhotoViewer.dll Windows | PhotoViewer.dll is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per L… |
| Pixtool.exe | Pixtool.exe Windows | Pixtool.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS… |
| Pktmon.exe | Pktmon.exe Windows | Pktmon.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Reconnaissance. Mapped ATT&CK techniques (per … |
| Pnputil.exe | Pnputil.exe Windows | Pnputil.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS… |
| Powerpnt.exe | Powerpnt.exe Windows | Powerpnt.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per LOLB… |
| Presentationhost.exe | Presentationhost.exe Windows | Presentationhost.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, Download. Mapped ATT&CK tec… |
| Print.exe | Print.exe Windows | Print.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: ADS, Copy. Mapped ATT&CK techniques (per LOLBAS… |
| PrintBrm.exe | PrintBrm.exe Windows | PrintBrm.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download, ADS. Mapped ATT&CK techniques (per… |
| Procdump.exe | Procdump.exe Windows | Procdump.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBA… |
| ProtocolHandler.exe | ProtocolHandler.exe Windows | ProtocolHandler.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (p… |
| Provlaunch.exe | Provlaunch.exe Windows | Provlaunch.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOL… |
| Psr.exe | Psr.exe Windows | Psr.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Reconnaissance. Mapped ATT&CK techniques (per LOL… |
| Pubprn.vbs | Pubprn.vbs Windows | Pubprn.vbs is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS … |
| Query.exe | Query.exe Windows | Query.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS /… |
| Rasautou.exe | Rasautou.exe Windows | Rasautou.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBA… |
| rcsi.exe | rcsi.exe Windows | rcsi.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, AWL Bypass. Mapped ATT&CK techniques (p… |