Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

Encyclopedia for Executables

WelsonJS - Build a Windows app on the Windows built-in JavaScript engine

** DISCONTINUED ** C2 framework that uses Background Intelligent Transfer Service (BITS) as communication protocol and Direct Syscalls + Dinvoke for EDR user-mode hooking evasion.

Living Off Security Tools

A post-exploitation toolkit to simulate the weaponization and detection of native Windows binaries based on LOLBas framework.

Spoofing the Windows UAC "verified" publisher :)

Ransomware dataset, containing dynamic behaviour of more than 60 distinct ransomware families.

A collection of specific commands used by threat actors, detailing their procedural implementations of tactics and techniques from the MITRE ATT&CK framework.

LOLGEN: Living Off The Land Payload Generator

Script is written to fetch LOLBin Details from Security and Sysmon EVTX file.

Exfiltrate data with DNS queries in Hex. Based on CertUtil and NSLookup.

A library of MacOS scripts based on threat emulation, community research, CTI, atomic-red-team, and MITRE ATT&CK.

lowest-common denominator binaries

Powershell script that checks if a list of executables contains potential living of the land binaries or scripts.

A AWL/Applocker Bypassing tester using LOLBins

Lolbins File Info