712 indexed
LOLBINLiving-off-the-land binaries
712 binaries that adversaries abuse for malicious purposes — LOLBAS (Windows) + GTFOBins (Unix). Filter by platform. Authored by Adam Lundqvist.
Showing 151–200 of 234 in Windows · page 4 of 5
| ID | Title | Summary |
|---|---|---|
| rdrleakdiag.exe | rdrleakdiag.exe Windows | rdrleakdiag.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Dump. Mapped ATT&CK techniques (per LOLBA… |
| Reg.exe | Reg.exe Windows | Reg.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: ADS, Credentials. Mapped ATT&CK techniques (per L… |
| Regasm.exe | Regasm.exe Windows | Regasm.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: AWL Bypass, Execute. Mapped ATT&CK techniques … |
| Regedit.exe | Regedit.exe Windows | Regedit.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: ADS. Mapped ATT&CK techniques (per LOLBAS / G… |
| Regini.exe | Regini.exe Windows | Regini.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: ADS. Mapped ATT&CK techniques (per LOLBAS / GT… |
| Register-cimprovider.exe | Register-cimprovider.exe Windows | Register-cimprovider.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK technique… |
| Regsvcs.exe | Regsvcs.exe Windows | Regsvcs.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, AWL Bypass. Mapped ATT&CK techniques… |
| Regsvr32.exe | Regsvr32.exe Windows | Regsvr32.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: AWL Bypass, Execute. Mapped ATT&CK technique… |
| Remote.exe | Remote.exe Windows | Remote.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: AWL Bypass, Execute. Mapped ATT&CK techniques … |
| Replace.exe | Replace.exe Windows | Replace.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Copy, Download. Mapped ATT&CK techniques (per… |
| Reset.exe | Reset.exe Windows | Reset.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS /… |
| Rpcping.exe | Rpcping.exe Windows | Rpcping.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Credentials. Mapped ATT&CK techniques (per LO… |
| Rundll32.exe | Rundll32.exe Windows | Rundll32.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, ADS. Mapped ATT&CK techniques (per … |
| Runexehelper.exe | Runexehelper.exe Windows | Runexehelper.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per L… |
| Runonce.exe | Runonce.exe Windows | Runonce.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS… |
| Runscripthelper.exe | Runscripthelper.exe Windows | Runscripthelper.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (pe… |
| Sc.exe | Sc.exe Windows | Sc.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: ADS. Mapped ATT&CK techniques (per LOLBAS / GTFOBi… |
| Schtasks.exe | Schtasks.exe Windows | Schtasks.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBA… |
| Scriptrunner.exe | Scriptrunner.exe Windows | Scriptrunner.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per L… |
| Scrobj.dll | Scrobj.dll Windows | Scrobj.dll is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per LOLBAS… |
| Setres.exe | Setres.exe Windows | Setres.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS … |
| SettingSyncHost.exe | SettingSyncHost.exe Windows | SettingSyncHost.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (pe… |
| Setupapi.dll | Setupapi.dll Windows | Setupapi.dll is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: AWL Bypass, Execute. Mapped ATT&CK technique… |
| Sftp.exe | Sftp.exe Windows | Sftp.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS / … |
| Shdocvw.dll | Shdocvw.dll Windows | Shdocvw.dll is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS… |
| Shell32.dll | Shell32.dll Windows | Shell32.dll is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS… |
| Shimgvw.dll | Shimgvw.dll Windows | Shimgvw.dll is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per LOLBA… |
| Sigverif.exe | Sigverif.exe Windows | Sigverif.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBA… |
| Sqldumper.exe | Sqldumper.exe Windows | Sqldumper.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Dump. Mapped ATT&CK techniques (per LOLBAS … |
| Sqlps.exe | Sqlps.exe Windows | Sqlps.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS /… |
| SQLToolsPS.exe | SQLToolsPS.exe Windows | SQLToolsPS.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOL… |
| Squirrel.exe | Squirrel.exe Windows | Squirrel.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download, AWL Bypass, Execute. Mapped ATT&CK… |
| ssh.exe | ssh.exe Windows | ssh.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS / G… |
| Stordiag.exe | Stordiag.exe Windows | Stordiag.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBA… |
| SyncAppvPublishingServer.exe | SyncAppvPublishingServer.exe Windows | SyncAppvPublishingServer.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techn… |
| Syncappvpublishingserver.vbs | Syncappvpublishingserver.vbs Windows | Syncappvpublishingserver.vbs is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techn… |
| Syssetup.dll | Syssetup.dll Windows | Syssetup.dll is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: AWL Bypass, Execute. Mapped ATT&CK technique… |
| Tar.exe | Tar.exe Windows | Tar.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: ADS, Copy. Mapped ATT&CK techniques (per LOLBAS /… |
| te.exe | te.exe Windows | te.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS / GT… |
| Teams.exe | Teams.exe Windows | Teams.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS /… |
| TestWindowRemoteAgent.exe | TestWindowRemoteAgent.exe Windows | TestWindowRemoteAgent.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Upload. Mapped ATT&CK technique… |
| Tracker.exe | Tracker.exe Windows | Tracker.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, AWL Bypass. Mapped ATT&CK techniques… |
| Ttdinject.exe | Ttdinject.exe Windows | Ttdinject.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLB… |
| Tttracer.exe | Tttracer.exe Windows | Tttracer.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, Dump. Mapped ATT&CK techniques (per… |
| Unregmp2.exe | Unregmp2.exe Windows | Unregmp2.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBA… |
| Update.exe | Update.exe Windows | Update.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download, AWL Bypass, Execute. Mapped ATT&CK t… |
| Url.dll | Url.dll Windows | Url.dll is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS / G… |
| UtilityFunctions.ps1 | UtilityFunctions.ps1 Windows | UtilityFunctions.ps1 is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (p… |
| vbc.exe | vbc.exe Windows | vbc.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Compile. Mapped ATT&CK techniques (per LOLBAS / G… |
| Verclsid.exe | Verclsid.exe Windows | Verclsid.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBA… |