Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

Encyclopedia for Executables

WelsonJS - Build a Windows app on the Windows built-in JavaScript engine

** DISCONTINUED ** C2 framework that uses Background Intelligent Transfer Service (BITS) as communication protocol and Direct Syscalls + Dinvoke for EDR user-mode hooking evasion.

Living Off Security Tools

A post-exploitation toolkit to simulate the weaponization and detection of native Windows binaries based on LOLBas framework.

Spoofing the Windows UAC "verified" publisher :)

Ransomware dataset, containing dynamic behaviour of more than 60 distinct ransomware families.

A collection of specific commands used by threat actors, detailing their procedural implementations of tactics and techniques from the MITRE ATT&CK framework.

Script is written to fetch LOLBin Details from Security and Sysmon EVTX file.

LOLGEN: Living Off The Land Payload Generator

Exfiltrate data with DNS queries in Hex. Based on CertUtil and NSLookup.

A library of MacOS scripts based on threat emulation, community research, CTI, atomic-red-team, and MITRE ATT&CK.

Powershell script that checks if a list of executables contains potential living of the land binaries or scripts.

lowest-common denominator binaries

Lolbins File Info

A AWL/Applocker Bypassing tester using LOLBins