Andreas Regli·Oct 25Living off the living off the land: a directory of LOTL projectsMost defenders know GTFOBins and LOLBAS. Fewer know about LOLESXi, LOTP, or RogueApps. Over the last few years the security community has…
Aastha Thakker·May 7LOLBins: Binaries Laughing Out LoudLet’s put aside the “Hollywood” movie portrayals of hacking; none of these attacks involve custom malware or weird 0-days. Some of the…
InMeetCyberbyAeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]·Apr 15Living Off the Land Isn’t Dead, You’re Just Using 2019 LOLBinsA laptop fan spins under a fluorescent office light that never quite turns off. The machine looks ordinary until you notice the processes…
Redfox Security·Apr 14ClickOnce: The Overlooked Windows LOLBin for Red TeamersWhen red teamers think of Windows LOLBins, common names come to mind: mshta.exe, rundll32.exe, regsvr32.exe, installutil.exe. However, one…
Suvin Majithia·Jan 26From EVTX Logs to MITRE‑Mapped Threats: Building a Lightweight UEBA Pipeline for LOLBinsThe Problem: Too Much Noise