712 indexed
LOLBINLiving-off-the-land binaries
712 binaries that adversaries abuse for malicious purposes — LOLBAS (Windows) + GTFOBins (Unix). Filter by platform. Authored by Adam Lundqvist.
Showing 401–450 of 712 · page 9 of 15
| ID | Title | Summary |
|---|---|---|
| nvim | nvim Unix | nvim is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: no documented abuse functions. Mapped ATT&CK techniques (per … |
| octave | octave Unix | octave is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write, shell. Mapped ATT&CK techniques (per… |
| od | od Unix | od is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MI… |
| odbcad32.exe | odbcad32.exe Windows | odbcad32.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: UAC Bypass. Mapped ATT&CK techniques (per LO… |
| Odbcconf.exe | Odbcconf.exe Windows | Odbcconf.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBA… |
| OfflineScannerShell.exe | OfflineScannerShell.exe Windows | OfflineScannerShell.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques… |
| OneDriveStandaloneUpdater.exe | OneDriveStandaloneUpdater.exe Windows | OneDriveStandaloneUpdater.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK tec… |
| opencode | opencode Unix | opencode is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: command, inherit. Mapped ATT&CK techniques (per LOLBAS / … |
| OpenConsole.exe | OpenConsole.exe Windows | OpenConsole.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LO… |
| openssl | openssl Unix | openssl is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: download, file-read, file-write, library-load, reverse-she… |
| openvpn | openvpn Unix | openvpn is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, shell. Mapped ATT&CK techniques (per LOLBAS / G… |
| openvt | openvt Unix | openvt is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: command. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → … |
| opkg | opkg Unix | opkg is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITR… |
| pandoc | pandoc Unix | pandoc is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write, inherit. Mapped ATT&CK techniques (p… |
| passwd | passwd Unix | passwd is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: privilege-escalation. Mapped ATT&CK techniques (per LOLBAS … |
| paste | paste Unix | paste is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins →… |
| pax | pax Unix | pax is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| Pcalua.exe | Pcalua.exe Windows | Pcalua.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS … |
| Pcwrun.exe | Pcwrun.exe Windows | Pcwrun.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS … |
| Pcwutl.dll | Pcwutl.dll Windows | Pcwutl.dll is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS … |
| pdb | pdb Unix | pdb is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MIT… |
| pdflatex | pdflatex Unix | pdflatex is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, file-write, shell. Mapped ATT&CK techniques (p… |
| pdftex | pdftex Unix | pdftex is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MI… |
| perf | perf Unix | perf is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITR… |
| perl | perl Unix | perl is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: download, file-read, reverse-shell, shell, upload. Mapped ATT… |
| perlbug | perlbug Unix | perlbug is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| Pester.bat | Pester.bat Windows | Pester.bat is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS … |
| pexec | pexec Unix | pexec is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MIT… |
| pg | pg Unix | pg is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBi… |
| PhotoViewer.dll | PhotoViewer.dll Windows | PhotoViewer.dll is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per L… |
| php | php Unix | php is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: command, download, file-read, file-write, reverse-shell, shell… |
| pic | pic Unix | pic is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read, shell. Mapped ATT&CK techniques (per LOLBAS / GTFOB… |
| pico | pico Unix | pico is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: no documented abuse functions. Mapped ATT&CK techniques (per … |
| pidstat | pidstat Unix | pidstat is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → M… |
| pip | pip Unix | pip is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit, shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBin… |
| pipx | pipx Unix | pipx is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MI… |
| Pixtool.exe | Pixtool.exe Windows | Pixtool.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS… |
| pkexec | pkexec Unix | pkexec is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MI… |
| pkg | pkg Unix | pkg is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: command. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MIT… |
| Pktmon.exe | Pktmon.exe Windows | Pktmon.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Reconnaissance. Mapped ATT&CK techniques (per … |
| plymouth | plymouth Unix | plymouth is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → … |
| Pnputil.exe | Pnputil.exe Windows | Pnputil.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute. Mapped ATT&CK techniques (per LOLBAS… |
| podman | podman Unix | podman is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MI… |
| poetry | poetry Unix | poetry is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: inherit. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → … |
| posh | posh Unix | posh is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: shell. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MITR… |
| Powerpnt.exe | Powerpnt.exe Windows | Powerpnt.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download. Mapped ATT&CK techniques (per LOLB… |
| pr | pr Unix | pr is a Unix living-off-the-land binary catalogued by the GTFOBins. Documented abuse functions: file-read. Mapped ATT&CK techniques (per LOLBAS / GTFOBins → MI… |
| Presentationhost.exe | Presentationhost.exe Windows | Presentationhost.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Execute, Download. Mapped ATT&CK tec… |
| Print.exe | Print.exe Windows | Print.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: ADS, Copy. Mapped ATT&CK techniques (per LOLBAS… |
| PrintBrm.exe | PrintBrm.exe Windows | PrintBrm.exe is a Windows living-off-the-land binary catalogued by the LOLBAS Project. Documented abuse functions: Download, ADS. Mapped ATT&CK techniques (per… |