712 indexed
LOLBINLiving-off-the-land binaries
712 binaries that adversaries abuse for malicious purposes — LOLBAS (Windows) + GTFOBins (Unix). Filter by platform. Authored by Adam Lundqvist.
Showing 151–200 of 712 · page 4 of 15
| ID | Title | Summary |
|---|---|---|
| Desk.cpl | Desk.cpl Windows | Desk.cpl is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS / … |
| Desktopimgdownldr.exe | Desktopimgdownldr.exe Windows | Desktopimgdownldr.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques … |
| DeviceCredentialDeployment.exe | DeviceCredentialDeployment.exe Windows | DeviceCredentialDeployment.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Conceal. Mapped ATT&CK tec… |
| Devinit.exe | Devinit.exe Windows | Devinit.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS… |
| Devtoolslauncher.exe | Devtoolslauncher.exe Windows | Devtoolslauncher.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (p… |
| devtunnel.exe | devtunnel.exe Windows | devtunnel.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per LOL… |
| Dfshim.dll | Dfshim.dll Windows | Dfshim.dll is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: AWL Bypass. Mapped ATT&CK techniques (per LOLB… |
| Dfsvc.exe | Dfsvc.exe Windows | Dfsvc.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: AWL Bypass. Mapped ATT&CK techniques (per LOLBA… |
| dhclient | dhclient Unix | dhclient is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → … |
| dialog | dialog Unix | dialog is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins … |
| Diantz.exe | Diantz.exe Windows | Diantz.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: ADS, Download, Execute. Mapped ATT&CK techniqu… |
| diff | diff Unix | diff is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → … |
| dig | dig Unix | dig is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| Diskshadow.exe | Diskshadow.exe Windows | Diskshadow.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Dump, Execute. Mapped ATT&CK techniques (p… |
| distcc | distcc Unix | distcc is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MI… |
| dmesg | dmesg Unix | dmesg is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, inherit. Mapped ATT&CK techniques (per LOLBAS / G… |
| dmidecode | dmidecode Unix | dmidecode is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-write. Mapped ATT&CK techniques (per LOLBAS / GTFOB… |
| dmsetup | dmsetup Unix | dmsetup is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| dnf | dnf Unix | dnf is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: command. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MIT… |
| Dnscmd.exe | Dnscmd.exe Windows | Dnscmd.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS … |
| dnsmasq | dnsmasq Unix | dnsmasq is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: command. Mapped ATT&CK techniques (per LOLBAS / GTFOBins →… |
| dnx.exe | dnx.exe Windows | dnx.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS / G… |
| doas | doas Unix | doas is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITR… |
| docker | docker Unix | docker is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write, shell. Mapped ATT&CK techniques (per… |
| dos2unix | dos2unix Unix | dos2unix is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write. Mapped ATT&CK techniques (per LOLB… |
| dosbox | dosbox Unix | dosbox is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write. Mapped ATT&CK techniques (per LOLBAS… |
| dotnet | dotnet Unix | dotnet is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, shell. Mapped ATT&CK techniques (per LOLBAS / GT… |
| Dotnet.exe | Dotnet.exe Windows | Dotnet.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: AWL Bypass, Execute. Mapped ATT&CK techniques … |
| dpkg | dpkg Unix | dpkg is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit, shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBi… |
| dsdbutil.exe | dsdbutil.exe Windows | dsdbutil.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Dump. Mapped ATT&CK techniques (per LOLBAS /… |
| dstat | dstat Unix | dstat is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| dtutil.exe | dtutil.exe Windows | dtutil.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Copy. Mapped ATT&CK techniques (per LOLBAS / G… |
| Dump64.exe | Dump64.exe Windows | Dump64.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Dump. Mapped ATT&CK techniques (per LOLBAS / G… |
| DumpMinitool.exe | DumpMinitool.exe Windows | DumpMinitool.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Dump. Mapped ATT&CK techniques (per LOLB… |
| dvips | dvips Unix | dvips is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MIT… |
| Dxcap.exe | Dxcap.exe Windows | Dxcap.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS /… |
| easy_install | easy_install Unix | easy_install is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit. Mapped ATT&CK techniques (per LOLBAS / GTFOB… |
| easyrsa | easyrsa Unix | easyrsa is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| eb | eb Unix | eb is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITR… |
| ECMangen.exe | ECMangen.exe Windows | ECMangen.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per LOLB… |
| ed | ed Unix | ed is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write, shell. Mapped ATT&CK techniques (per LOL… |
| efax | efax Unix | efax is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → … |
| egrep | egrep Unix | egrep is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins →… |
| elvish | elvish Unix | elvish is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write, shell. Mapped ATT&CK techniques (per… |
| emacs | emacs Unix | emacs is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write, shell. Mapped ATT&CK techniques (per … |
| enscript | enscript Unix | enscript is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → … |
| env | env Unix | env is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITRE… |
| eqn | eqn Unix | eqn is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| Esentutl.exe | Esentutl.exe Windows | Esentutl.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Copy, ADS, Download. Mapped ATT&CK technique… |
| espeak | espeak Unix | espeak is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins … |