Search gtfobins and lolbas files from your terminal

Offline command line lookup utility for GTFOBins (https://github.com/GTFOBins/GTFOBins.github.io), LOLBAS (https://github.com/LOLBAS-Project/LOLBAS), WADComs (https://wadcoms.github.io), and HijackLibs (https://hijacklibs.net/).

Awesome list of Living off the Land (LOL) methods, tools, and features commonly abused by attackers

A post-exploitation toolkit to simulate the weaponization and detection of native Windows binaries based on LOLBas framework.

Exfiltrate data with DNS queries. Based on CertUtil and NSLookup.

Flucky - Advanced Bluetooth HID Attack Platform 🦆 Professional-grade wireless security testing tool featuring automatic BLE connectivity, psychological operations (gaslighting), LOLBAS integration, and military-grade encryption. Built for authorized red teams, security awareness training, and educational purposes only.

Webscrapper written in python3 to show lolbas in a terminal.

A C2 server designed to run within Electron applications.

Artifacts release of BLAKE3 hashes categorized by operating systems into the content hash, directory, file name, full path, and living-off-the-land (gtfobins, lolbas, & loobins) sets to create poppy blooms.

ssh.exe is available in windows 10 / server 2019 by default, let's LOLBAS it up!

Powershell script that checks if a list of executables contains potential living of the land binaries or scripts.

lowest-common denominator binaries

Collection of LOL items from these popular opensource projects: LOLBAS, GTFOBins, WADComs, and PayloadAllTheThings

For educational and security research purposes only.