Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in "living off the land" macOS binaries and how they can be used by threat actors for malicious purposes.

lolC2 is a collection of C2 frameworks that leverage legitimate services to evade detection

A collection of scripts I've written to help red and blue teams with malware persistence techniques.

Living Off The Land (LOTL) persistent Reverse shell

Living of the Land of Free SaaS

Living Off Security Tools

Living Off The Land API

Living off the land Data Exfiltration methods

goLoL is a Windows host scanner with dual support for LOLBAS binaries and LOLDrivers. It lists LOLBAS techniques runnable at your current privilege level (with MITRE ATT&CK mappings) and can scan local .sys files for vulnerable/malicious LOLDrivers hash matches.

A repository dedicated to researching, documenting, developing, and ultimately, defending against various strains of malicious software.

Living off the Land (LOL) attack techniques, tools, and defender resources

A C# program featuring an all-in-one bypass for CLM, AppLocker and AMSI using Runspace.

Simple powershell script to find living off land binaries and scripts on a system.

LOLGEN: Living Off The Land Payload Generator

GhostLNK is a professional-grade Windows LNK (shortcut) file generator with advanced stealth capabilities. It converts remote URLs (Dropbox, VPS, etc.) into PowerShell commands, encodes them in Base64, and embeds them into legitimate-looking LNK files that bypass modern AV detection.

GitHub-native Command & Control Framework. 11 covert channels. Zero infrastructure.

A demo of some living-off-the-land techniques

Living Off The Land Binaries And Exploits Guides