712 indexed
LOLBINLiving-off-the-land binaries
712 binaries that adversaries abuse for malicious purposes — LOLBAS (Windows) + GTFOBins (Unix). Filter by platform. Authored by Adam Lundqvist.
Showing 201–234 of 234 in Windows · page 5 of 5
| ID | Title | Summary |
|---|---|---|
| Visio.exe | Visio.exe Windows | Visio.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per LOLBAS … |
| VisualUiaVerifyNative.exe | VisualUiaVerifyNative.exe Windows | VisualUiaVerifyNative.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: AWL Bypass. Mapped ATT&CK techn… |
| VSDiagnostics.exe | VSDiagnostics.exe Windows | VSDiagnostics.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per … |
| Vshadow.exe | Vshadow.exe Windows | Vshadow.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS… |
| VSIISExeLauncher.exe | VSIISExeLauncher.exe Windows | VSIISExeLauncher.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (p… |
| vsjitdebugger.exe | vsjitdebugger.exe Windows | vsjitdebugger.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per … |
| VSLaunchBrowser.exe | VSLaunchBrowser.exe Windows | VSLaunchBrowser.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download, Execute. Mapped ATT&CK tech… |
| vsls-agent.exe | vsls-agent.exe Windows | vsls-agent.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOL… |
| vstest.console.exe | vstest.console.exe Windows | vstest.console.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: AWL Bypass. Mapped ATT&CK techniques (… |
| Wab.exe | Wab.exe Windows | Wab.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS / G… |
| wbadmin.exe | wbadmin.exe Windows | wbadmin.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Dump. Mapped ATT&CK techniques (per LOLBAS / … |
| wbemtest.exe | wbemtest.exe Windows | wbemtest.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBA… |
| Wfc.exe | Wfc.exe Windows | Wfc.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: AWL Bypass. Mapped ATT&CK techniques (per LOLBAS … |
| WFMFormat.exe | WFMFormat.exe Windows | WFMFormat.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLB… |
| WinDbg.exe | WinDbg.exe Windows | WinDbg.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS … |
| winfile.exe | winfile.exe Windows | winfile.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS… |
| winget.exe | winget.exe Windows | winget.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, Download, AWL Bypass. Mapped ATT&CK t… |
| WinProj.exe | WinProj.exe Windows | WinProj.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per LOLBA… |
| winrm.vbs | winrm.vbs Windows | winrm.vbs is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, AWL Bypass. Mapped ATT&CK techniques (… |
| Winword.exe | Winword.exe Windows | Winword.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per LOLBA… |
| Wlrmdr.exe | Wlrmdr.exe Windows | Wlrmdr.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS … |
| Wmic.exe | Wmic.exe Windows | Wmic.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: ADS, Execute, Copy. Mapped ATT&CK techniques (pe… |
| WorkFolders.exe | WorkFolders.exe Windows | WorkFolders.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LO… |
| write.exe | write.exe Windows | write.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS /… |
| Wscript.exe | Wscript.exe Windows | Wscript.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: ADS. Mapped ATT&CK techniques (per LOLBAS / G… |
| Wsl.exe | Wsl.exe Windows | Wsl.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, Download. Mapped ATT&CK techniques (per … |
| Wsreset.exe | Wsreset.exe Windows | Wsreset.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: UAC Bypass. Mapped ATT&CK techniques (per LOL… |
| wt.exe | wt.exe Windows | wt.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS / GT… |
| wuauclt.exe | wuauclt.exe Windows | wuauclt.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS… |
| XBootMgr.exe | XBootMgr.exe Windows | XBootMgr.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBA… |
| XBootMgrSleep.exe | XBootMgrSleep.exe Windows | XBootMgrSleep.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per … |
| xsd.exe | xsd.exe Windows | xsd.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per LOLBAS / … |
| Xwizard.exe | Xwizard.exe Windows | Xwizard.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, Download. Mapped ATT&CK techniques (… |
| Zipfldr.dll | Zipfldr.dll Windows | Zipfldr.dll is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS… |