LOLBAS
Star

LOLBAS Logo

Living Off The Land Binaries, Scripts and Libraries

For more info on the project, click on the logo.

If you want to contribute, check out our contribution guide. Our criteria list sets out what we define as a LOLBin/Script/Lib. More information on programmatically accesssing this project can be found on the API page.

MITRE ATT&CK® and ATT&CK® are registered trademarks of The MITRE Corporation. You can see the current ATT&CK® mapping of this project on the ATT&CK® Navigator.

If you are looking for UNIX binaries, please visit gtfobins.github.io.
If you are looking for drivers, please visit loldrivers.io.

Binary Functions Type ATT&CK® Techniques
AddinUtil.exe Binaries
AppInstaller.exe Binaries
Aspnet_Compiler.exe Binaries
At.exe Binaries
Atbroker.exe Binaries
Bash.exe Binaries
Bitsadmin.exe Binaries
CertOC.exe Binaries
CertReq.exe Binaries
Certutil.exe Binaries
Cmd.exe Binaries
Cmdkey.exe Binaries
cmdl32.exe Binaries
Cmstp.exe Binaries
Colorcpl.exe Binaries
ComputerDefaults.exe Binaries
ConfigSecurityPolicy.exe Binaries
Conhost.exe Binaries
Control.exe Binaries
Csc.exe Binaries
Cscript.exe Binaries
CustomShellHost.exe Binaries
DataSvcUtil.exe Binaries
Desktopimgdownldr.exe Binaries
DeviceCredentialDeployment.exe Binaries
Dfsvc.exe Binaries
Diantz.exe Binaries
Diskshadow.exe Binaries
Dnscmd.exe Binaries
Esentutl.exe Binaries
Eventvwr.exe Binaries
Expand.exe Binaries
Explorer.exe Binaries
Extexport.exe Binaries
Extrac32.exe Binaries
Findstr.exe Binaries
Finger.exe Binaries
fltMC.exe Binaries
Forfiles.exe Binaries
Fsutil.exe Binaries
Ftp.exe Binaries
Gpscript.exe Binaries
Hh.exe Binaries
IMEWDBLD.exe Binaries
Ie4uinit.exe Binaries
iediagcmd.exe Binaries
Ieexec.exe Binaries
Ilasm.exe Binaries
Infdefaultinstall.exe Binaries
Installutil.exe Binaries
Jsc.exe Binaries
Ldifde.exe Binaries
Makecab.exe Binaries
Mavinject.exe Binaries
Microsoft.Workflow.Compiler.exe Binaries
Mmc.exe Binaries
MpCmdRun.exe Binaries
Msbuild.exe Binaries
Msconfig.exe Binaries
Msdt.exe Binaries
Msedge.exe Binaries
Mshta.exe Binaries
Msiexec.exe Binaries
Netsh.exe Binaries
Ngen.exe Binaries
Odbcconf.exe Binaries
OfflineScannerShell.exe Binaries
OneDriveStandaloneUpdater.exe Binaries
Pcalua.exe Binaries
Pcwrun.exe Binaries
Pktmon.exe Binaries
Pnputil.exe Binaries
Presentationhost.exe Binaries
Print.exe Binaries
PrintBrm.exe Binaries
Provlaunch.exe Binaries
Psr.exe Binaries
Rasautou.exe Binaries
rdrleakdiag.exe Binaries
Reg.exe Binaries
Regasm.exe Binaries
Regedit.exe Binaries
Regini.exe Binaries
Register-cimprovider.exe Binaries
Regsvcs.exe Binaries
Regsvr32.exe Binaries
Replace.exe Binaries
Rpcping.exe Binaries
Rundll32.exe Binaries
Runexehelper.exe Binaries
Runonce.exe Binaries
Runscripthelper.exe Binaries
Sc.exe Binaries
Schtasks.exe Binaries
Scriptrunner.exe Binaries
Setres.exe Binaries
SettingSyncHost.exe Binaries
ssh.exe Binaries
Stordiag.exe Binaries
SyncAppvPublishingServer.exe Binaries
Tar.exe Binaries
Ttdinject.exe Binaries
Tttracer.exe Binaries
Unregmp2.exe Binaries
vbc.exe Binaries
Verclsid.exe Binaries
Wab.exe Binaries
wbadmin.exe Binaries
winget.exe Binaries
Wlrmdr.exe Binaries
Wmic.exe Binaries
WorkFolders.exe Binaries
Wscript.exe Binaries
Wsreset.exe Binaries
wuauclt.exe Binaries
Xwizard.exe Binaries
msedge_proxy.exe Binaries
msedgewebview2.exe Binaries
wt.exe Binaries
Advpack.dll Libraries
Desk.cpl Libraries
Dfshim.dll Libraries
Ieadvpack.dll Libraries
Ieframe.dll Libraries
Mshtml.dll Libraries
Pcwutl.dll Libraries
Scrobj.dll Libraries
Setupapi.dll Libraries
Shdocvw.dll Libraries
Shell32.dll Libraries
Shimgvw.dll Libraries
Syssetup.dll Libraries
Url.dll Libraries
Zipfldr.dll Libraries
Comsvcs.dll Libraries
AccCheckConsole.exe OtherMSBinaries
adplus.exe OtherMSBinaries
AgentExecutor.exe OtherMSBinaries
AppCert.exe OtherMSBinaries
Appvlp.exe OtherMSBinaries
Bginfo.exe OtherMSBinaries
Cdb.exe OtherMSBinaries
coregen.exe OtherMSBinaries
Createdump.exe OtherMSBinaries
csi.exe OtherMSBinaries
DefaultPack.EXE OtherMSBinaries
Devinit.exe OtherMSBinaries
Devtoolslauncher.exe OtherMSBinaries
dnx.exe OtherMSBinaries
Dotnet.exe OtherMSBinaries
dsdbutil.exe OtherMSBinaries
dtutil.exe OtherMSBinaries
Dump64.exe OtherMSBinaries
DumpMinitool.exe OtherMSBinaries
Dxcap.exe OtherMSBinaries
Excel.exe OtherMSBinaries
Fsi.exe OtherMSBinaries
FsiAnyCpu.exe OtherMSBinaries
Mftrace.exe OtherMSBinaries
Microsoft.NodejsTools.PressAnyKey.exe OtherMSBinaries
MSAccess.exe OtherMSBinaries
Msdeploy.exe OtherMSBinaries
MsoHtmEd.exe OtherMSBinaries
Mspub.exe OtherMSBinaries
msxsl.exe OtherMSBinaries
ntdsutil.exe OtherMSBinaries
OpenConsole.exe OtherMSBinaries
Powerpnt.exe OtherMSBinaries
Procdump.exe OtherMSBinaries
ProtocolHandler.exe OtherMSBinaries
rcsi.exe OtherMSBinaries
Remote.exe OtherMSBinaries
Sqldumper.exe OtherMSBinaries
Sqlps.exe OtherMSBinaries
SQLToolsPS.exe OtherMSBinaries
Squirrel.exe OtherMSBinaries
te.exe OtherMSBinaries
Teams.exe OtherMSBinaries
TestWindowRemoteAgent.exe OtherMSBinaries
Tracker.exe OtherMSBinaries
Update.exe OtherMSBinaries
VSDiagnostics.exe OtherMSBinaries
VSIISExeLauncher.exe OtherMSBinaries
Visio.exe OtherMSBinaries
VisualUiaVerifyNative.exe OtherMSBinaries
VSLaunchBrowser.exe OtherMSBinaries
Vshadow.exe OtherMSBinaries
vsjitdebugger.exe OtherMSBinaries
WFMFormat.exe OtherMSBinaries
Wfc.exe OtherMSBinaries
WinProj.exe OtherMSBinaries
Winword.exe OtherMSBinaries
Wsl.exe OtherMSBinaries
devtunnel.exe OtherMSBinaries
vsls-agent.exe OtherMSBinaries
vstest.console.exe OtherMSBinaries
winfile.exe OtherMSBinaries
xsd.exe OtherMSBinaries
CL_LoadAssembly.ps1 Scripts
CL_Mutexverifiers.ps1 Scripts
CL_Invocation.ps1 Scripts
Launch-VsDevShell.ps1 Scripts
Manage-bde.wsf Scripts
Pubprn.vbs Scripts
Syncappvpublishingserver.vbs Scripts
UtilityFunctions.ps1 Scripts
winrm.vbs Scripts
Pester.bat Scripts