712 indexed
LOLBINLiving-off-the-land binaries
712 binaries that adversaries abuse for malicious purposes — LOLBAS (Windows) + GTFOBins (Unix). Filter by platform. Authored by Adam Lundqvist.
Showing 301–350 of 712 · page 7 of 15
| ID | Title | Summary |
|---|---|---|
| ksu | ksu Unix | ksu is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITRE… |
| kubectl | kubectl Unix | kubectl is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell, upload. Mapped ATT&CK techniques (per LOLBAS / GTFO… |
| last | last Unix | last is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → … |
| lastb | lastb Unix | lastb is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: no documented abuse functions. Mapped ATT&CK techniques (per… |
| latex | latex Unix | latex is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write, shell. Mapped ATT&CK techniques (per … |
| latexmk | latexmk Unix | latexmk is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, inherit, shell. Mapped ATT&CK techniques (per L… |
| Launch-VsDevShell.ps1 | Launch-VsDevShell.ps1 Windows | Launch-VsDevShell.ps1 is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (… |
| ld.so | ld.so Unix | ld.so is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MIT… |
| ldconfig | ldconfig Unix | ldconfig is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: library-load. Mapped ATT&CK techniques (per LOLBAS / GTFO… |
| Ldifde.exe | Ldifde.exe Windows | Ldifde.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per LOLBAS… |
| less | less Unix | less is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: command, file-read, file-write, inherit, shell. Mapped ATT&CK… |
| lftp | lftp Unix | lftp is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITR… |
| links | links Unix | links is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins →… |
| ln | ln Unix | ln is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: privilege-escalation. Mapped ATT&CK techniques (per LOLBAS / GT… |
| Logger.exe | Logger.exe Windows | Logger.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS … |
| loginctl | loginctl Unix | loginctl is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → … |
| logrotate | logrotate Unix | logrotate is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write, shell. Mapped ATT&CK techniques (… |
| logsave | logsave Unix | logsave is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| look | look Unix | look is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → … |
| lp | lp Unix | lp is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: upload. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITRE… |
| ltrace | ltrace Unix | ltrace is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write, shell. Mapped ATT&CK techniques (per… |
| lua | lua Unix | lua is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: bind-shell, download, file-read, file-write, reverse-shell, sh… |
| lualatex | lualatex Unix | lualatex is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit. Mapped ATT&CK techniques (per LOLBAS / GTFOBins … |
| luatex | luatex Unix | luatex is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → … |
| lwp-download | lwp-download Unix | lwp-download is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: download, file-read, file-write. Mapped ATT&CK techni… |
| lwp-request | lwp-request Unix | lwp-request is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFO… |
| lxd | lxd Unix | lxd is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITRE… |
| m4 | m4 Unix | m4 is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: command, file-read, shell. Mapped ATT&CK techniques (per LOLBAS… |
| mail Unix | mail is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITR… | |
| make | make Unix | make is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write, shell. Mapped ATT&CK techniques (per L… |
| Makecab.exe | Makecab.exe Windows | Makecab.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: ADS, Download, Execute. Mapped ATT&CK techniq… |
| man | man Unix | man is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, inherit, shell. Mapped ATT&CK techniques (per LOLBA… |
| Manage-bde.wsf | Manage-bde.wsf Windows | Manage-bde.wsf is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOL… |
| Mavinject.exe | Mavinject.exe Windows | Mavinject.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, ADS. Mapped ATT&CK techniques (per… |
| mawk | mawk Unix | mawk is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write, shell. Mapped ATT&CK techniques (per L… |
| Mftrace.exe | Mftrace.exe Windows | Mftrace.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS… |
| Microsoft.NodejsTools.PressAnyKey.exe | Microsoft.NodejsTools.PressAnyKey.exe Windows | Microsoft.NodejsTools.PressAnyKey.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT… |
| Microsoft.Workflow.Compiler.exe | Microsoft.Workflow.Compiler.exe Windows | Microsoft.Workflow.Compiler.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, AWL Bypass. Mapp… |
| minicom | minicom Unix | minicom is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| Mmc.exe | Mmc.exe Windows | Mmc.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, UAC Bypass, Download. Mapped ATT&CK tech… |
| more | more Unix | more is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, shell. Mapped ATT&CK techniques (per LOLBAS / GTFO… |
| mosh-server | mosh-server Unix | mosh-server is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins… |
| mosquitto | mosquitto Unix | mosquitto is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBi… |
| mount | mount Unix | mount is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: privilege-escalation. Mapped ATT&CK techniques (per LOLBAS /… |
| MpCmdRun.exe | MpCmdRun.exe Windows | MpCmdRun.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download, ADS. Mapped ATT&CK techniques (per… |
| Mpiexec.exe | Mpiexec.exe Windows | Mpiexec.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS… |
| MSAccess.exe | MSAccess.exe Windows | MSAccess.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per LOLB… |
| Msbuild.exe | Msbuild.exe Windows | Msbuild.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: AWL Bypass, Execute. Mapped ATT&CK techniques… |
| Msconfig.exe | Msconfig.exe Windows | Msconfig.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBA… |
| Mscopilot_proxy.exe | Mscopilot_proxy.exe Windows | Mscopilot_proxy.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (pe… |