Ayush Sahay
|
5cb17cfb26
|
Create dotnet.yml
|
2019-12-11 15:53:12 +05:30 |
|
Oddvar Moe
|
94a295213e
|
Added Dump example to TTTracer.exe
|
2019-11-18 12:50:49 +01:00 |
|
Oddvar Moe
|
e0db5721ff
|
Added Dump Example to TTTracer.exe
|
2019-11-18 12:47:51 +01:00 |
|
Oddvar Moe
|
4663c13324
|
Adjustment
|
2019-11-05 15:47:20 +01:00 |
|
Oddvar Moe
|
8d74b3062f
|
Adjustment
|
2019-11-05 14:36:53 +01:00 |
|
Oddvar Moe
|
f9a7c42a85
|
Added TTTracer.exe - Thanks Onur Ulusoy
|
2019-11-05 12:12:46 +01:00 |
|
Oddvar Moe
|
13093c879e
|
Updated odbcconf.exe with discovery from @Hexacorn <3
|
2019-10-24 10:01:44 +02:00 |
|
Oddvar Moe
|
cb9fa974dd
|
Merge pull request #46 from felamos/patch-1
Create devtoolslauncher.yml
|
2019-10-07 23:56:01 +02:00 |
|
Oddvar Moe
|
7469812286
|
Update and rename devtoolslauncher.yml to Devtoolslauncher.yml
|
2019-10-07 23:55:44 +02:00 |
|
Oddvar Moe
|
8eb582de42
|
Update At.yml
|
2019-10-07 23:51:26 +02:00 |
|
Ayush Sahay
|
134b272567
|
Update devtoolslauncher.yml
|
2019-10-07 12:15:47 +05:30 |
|
Ayush Sahay
|
0fe0504622
|
Update devtoolslauncher.yml
|
2019-10-04 10:20:38 +05:30 |
|
Ayush Sahay
|
48ed8f7914
|
Create devtoolslauncher.yml
|
2019-10-04 09:29:59 +05:30 |
|
freddie
|
9f47e26f16
|
Adding At.exe, for submission to LOLbas list, with proof of malware using it in wild :O
|
2019-09-21 03:19:25 +01:00 |
|
Oddvar Moe
|
32757cd0c3
|
Added Office binaries from jreegun to the project. Pull request 42
|
2019-09-17 22:58:03 +02:00 |
|
Oddvar Moe
|
0644ac30d7
|
Added Office binaries from jreegun to the project. Pull request 42
|
2019-09-17 22:44:27 +02:00 |
|
Oddvar Moe
|
ed266c0983
|
Fixed some typos
|
2019-09-17 20:45:49 +02:00 |
|
Oddvar Moe
|
8762fc5735
|
Acknowledgement fix for comsvcs
|
2019-09-16 09:50:01 +02:00 |
|
Oddvar Moe
|
4ebf1ac4f7
|
Adjusted case sensitive type in yml file for Comsvcs
|
2019-09-16 09:44:14 +02:00 |
|
Oddvar Moe
|
11c6c7c48d
|
Adjusted
|
2019-09-16 09:38:05 +02:00 |
|
plowsec
|
dd5df7cf3e
|
Add Comsvcs.yml: dump lsass via signed DLL.
|
2019-08-30 14:12:46 +02:00 |
|
Oddvar Moe
|
5b63815c0a
|
Updated update and squirrel with updaterollback parameter
|
2019-07-02 09:06:19 +02:00 |
|
Oddvar Moe
|
8fcc9a105a
|
Fixed spacing error
|
2019-06-28 18:07:24 +02:00 |
|
Oddvar Moe
|
8528caf21d
|
Added Acknowledgement to wsl.exe
|
2019-06-28 18:05:34 +02:00 |
|
Oddvar Moe
|
f77b3b4019
|
Fixed spacing issue
|
2019-06-28 17:53:45 +02:00 |
|
Oddvar Moe
|
dd545693da
|
Merge pull request #40 from NotoriousRebel/master
Create Wsl.yml
|
2019-06-28 17:50:13 +02:00 |
|
NotoriousRebel
|
ff0155f599
|
Moved Wsl.yml location to OtherMSBinaries and added another example for possible usecases.
|
2019-06-28 09:20:56 -04:00 |
|
Oddvar Moe
|
e05ae6c051
|
Adjusted Update and Squirrel
|
2019-06-28 09:05:27 +02:00 |
|
Oddvar Moe
|
3be3e5f3f8
|
Added link to reegun blog
|
2019-06-28 08:48:41 +02:00 |
|
NotoriousRebel
|
ff7dd5893b
|
Added Wsl.yml
|
2019-06-27 15:39:12 -04:00 |
|
Oddvar Moe
|
b284e46763
|
Added example to wscript
|
2019-06-27 17:27:31 +02:00 |
|
Oddvar Moe
|
087b6367ca
|
Fixed missing ---
|
2019-06-27 17:21:41 +02:00 |
|
Oddvar Moe
|
60f55ee597
|
Adjusted Squirrel and Update
|
2019-06-27 17:12:23 +02:00 |
|
Oddvar Moe
|
1c42f7004a
|
Adjusted update.yml
|
2019-06-27 17:01:34 +02:00 |
|
Oddvar Moe
|
9ce9d8bc78
|
Merge pull request #38 from jreegun/patch-1
Create squirrel.yml
|
2019-06-27 16:46:11 +02:00 |
|
jreegun
|
307c77fa4d
|
Create update.yml
|
2019-06-27 20:26:24 +08:00 |
|
jreegun
|
c96d22b345
|
Create squirrel.yml
|
2019-06-27 20:22:35 +08:00 |
|
Oddvar Moe
|
d26c01fa45
|
Reverted back
|
2019-06-27 13:49:52 +02:00 |
|
Oddvar Moe
|
6338ac77a0
|
Remove % from Update.yml
|
2019-06-27 13:46:40 +02:00 |
|
Oddvar Moe
|
da3b619651
|
Adjusted new contributions
|
2019-06-27 13:42:06 +02:00 |
|
Oddvar Moe
|
a92b0e4d15
|
Adjusted new contributions
|
2019-06-27 13:41:07 +02:00 |
|
Oddvar Moe
|
285e4d78d8
|
Adjusted new contributions
|
2019-06-27 13:40:03 +02:00 |
|
Oddvar Moe
|
95e37b7cbf
|
Merge pull request #36 from yeyintminthuhtut/master
Cmd.exe ADS
|
2019-06-27 13:02:40 +02:00 |
|
Mr.Un1k0d3r
|
7ed8fb4d06
|
Create Teams-update.yml
|
2019-06-26 14:12:02 -04:00 |
|
r0lan
|
fb5f164827
|
Cmd.exe ADS
|
2019-06-26 18:33:11 +08:00 |
|
Bart
|
a511624f40
|
Create RunCmd_X64.yml
|
2019-06-08 19:55:06 +01:00 |
|
Oddvar Moe
|
f7748a08cc
|
added Jsc.exe - Thanks @DissectMalware
|
2019-05-31 13:56:55 +02:00 |
|
Oddvar Moe
|
106c359687
|
added Jsc.exe - Thanks @DissectMalware
|
2019-05-31 13:53:43 +02:00 |
|
Eli Salem
|
a7b6d2aad2
|
Add aswrundll.exe non microsoft lolbin
|
2019-03-20 10:53:11 +02:00 |
|
Oddvar Moe
|
17e541f8c0
|
Added wsreset.exe - uac bypass
|
2019-03-18 08:44:53 +01:00 |
|
bohops
|
8806a9e0ee
|
Added VSS use case
|
2019-02-12 08:15:55 -05:00 |
|
Oddvar Moe
|
69795dca7e
|
Added fixes from https://github.com/sagishahar, typos in wmic and extexport
|
2019-02-01 18:38:35 +01:00 |
|
Santiago Bruno
|
cc8288c7d5
|
Fixing some typos
|
2019-01-28 13:39:23 -03:00 |
|
Oddvar Moe
|
a0136a78cd
|
Typo in command - fixed
|
2019-01-24 11:52:25 +01:00 |
|
Oddvar Moe
|
92bcd8cfd8
|
added new example to certutil from egre55
|
2019-01-24 10:40:45 +01:00 |
|
Santiago Bruno
|
1a01ec5100
|
Merge branch 'master' of https://github.com/sbruno/LOLBAS
|
2019-01-23 20:07:22 -03:00 |
|
Santiago Bruno
|
64623edd6e
|
Renaming Ie4unit.yml as Ie4uinit.yml since this is the correct binary name
|
2019-01-23 20:06:16 -03:00 |
|
Santiago Bruno
|
7252652920
|
replacing ie4unit occurrences with ie4uinit
|
2019-01-23 20:04:12 -03:00 |
|
Oddvar Moe
|
3371628d0b
|
Converted pull request from keepwatch into yml format. Original request here: https://github.com/LOLBAS-Project/LOLBAS/pull/19 - Thanks for contributing
|
2018-12-12 12:56:53 +01:00 |
|
Oddvar Moe
|
aba9538581
|
minor changes to Eventvwr
|
2018-12-12 12:50:27 +01:00 |
|
Oddvar Moe
|
d827dfba1f
|
Merge pull request #22 from eSentire/master
Eventvwr.exe UAC bypass
|
2018-12-12 12:45:35 +01:00 |
|
Oddvar Moe
|
7addc14d7f
|
Update Eventvwr.yml
Category change
|
2018-12-12 12:45:05 +01:00 |
|
Oddvar Moe
|
57b348fb03
|
Added AWL Bypass to msdeploy
|
2018-12-12 12:34:59 +01:00 |
|
dave5623
|
889e86be04
|
Update Sqlps.yml
Minor Typo Fix
|
2018-12-11 09:38:39 -05:00 |
|
Maverick
|
99d1eed476
|
Correct wrongly attributed twitter handle
- it should be *Moriarty_Meng* instead of *moriarty2016*
|
2018-12-10 21:26:33 +01:00 |
|
Oddvar Moe
|
1af009d707
|
Added example to DFSVC - Thanks to PolarBearGod
|
2018-12-10 18:45:41 +01:00 |
|
Oddvar Moe
|
c9b4b244fa
|
Added ftp.exe
|
2018-12-10 15:03:30 +01:00 |
|
Oddvar Moe
|
04d193ccfa
|
Minor typo in Runscripthelper.exe
|
2018-12-10 14:38:48 +01:00 |
|
Oddvar Moe
|
94368c1e69
|
Major changes to Web portal - Small fixes to source files to adjust
|
2018-12-10 14:28:12 +01:00 |
|
bohops
|
2b77add5b4
|
Update Mmc.yml
|
2018-12-04 19:38:17 -05:00 |
|
bohops
|
931ea67ce4
|
Update Mmc.yml
|
2018-12-04 19:35:52 -05:00 |
|
bohops
|
838f2c9a49
|
Create Mmc.yml
|
2018-12-04 19:35:26 -05:00 |
|
bohops
|
cb1db201b8
|
Create Verclsid.yml
|
2018-12-04 19:26:34 -05:00 |
|
bohops
|
ef2b253227
|
Update Xwizard.yml
|
2018-12-04 19:09:42 -05:00 |
|
bohops
|
34b1287f10
|
Added rundll32 -sta COM server execution
|
2018-12-04 18:59:08 -05:00 |
|
Jacob Gajek
|
fd44373927
|
Eventvwr.exe UAC bypass
|
2018-11-01 15:20:09 -04:00 |
|
Oddvar Moe
|
60874f9754
|
Changed from non-existing category persistence to execute
|
2018-10-25 21:35:37 +02:00 |
|
Oddvar Moe
|
a61d2586cf
|
Errors in YAML files corrected
|
2018-10-25 21:24:55 +02:00 |
|
Oddvar Moe
|
550263cd1e
|
Removed MD files, we only use the webportal from now on. All MD files moved to archive
|
2018-10-25 18:31:11 +02:00 |
|
xenoscr
|
d6fe95fe98
|
Adding Microsoft.Workflow.Compiler.exe and payload examples.
|
2018-10-24 22:48:45 -04:00 |
|
Ossi Väänänen
|
31d7b4aa77
|
Failed to RTFM -- removed .md, added .yml
|
2018-10-24 11:55:52 +03:00 |
|
Conor Richard
|
c103cb3677
|
Adding 'Execute' categories to existing 'AWL Bypass' binaries.
|
2018-10-05 15:06:01 -04:00 |
|
bohops
|
6381da333c
|
Added Acknowledgement
|
2018-10-04 10:08:21 -04:00 |
|
bohops
|
783b4f3d9f
|
Added AWL Bypass
|
2018-10-04 10:07:02 -04:00 |
|
bohops
|
f8e9ac5a0a
|
Fixed a few categories
|
2018-09-26 10:33:52 -04:00 |
|
Oddvar Moe
|
bac3b9e56c
|
Update scripts with new template. Fixed mgmt script for webportal. Adjustments to existing yml files
|
2018-09-26 11:41:58 +02:00 |
|
Oddvar Moe
|
d48273583e
|
Changed alternate data stream to ADS as category
|
2018-09-26 09:34:01 +02:00 |
|
Oddvar Moe
|
7961a99173
|
minor adjustments
|
2018-09-25 02:33:38 +02:00 |
|
Oddvar Moe
|
f8fec9849b
|
Minor adjustments to be yaml compliant
|
2018-09-24 23:18:00 +02:00 |
|
Oddvar Moe
|
37cc1ee83e
|
Changed all OSBinaries according to the new template
|
2018-09-24 21:59:43 +02:00 |
|
bohops
|
68884a4c13
|
Update Zipfldr.yml
|
2018-09-24 14:36:13 -04:00 |
|
bohops
|
679a8a66bb
|
Update Url.yml
|
2018-09-24 14:35:06 -04:00 |
|
bohops
|
d045db1755
|
Update Url.yml
|
2018-09-24 14:34:40 -04:00 |
|
bohops
|
9c3dbada06
|
Update Setupapi.yml
|
2018-09-24 14:32:16 -04:00 |
|
bohops
|
ceebe9a9b9
|
Update Shdocvw.yml
|
2018-09-24 14:31:32 -04:00 |
|
bohops
|
c7925f613f
|
Update Shell32.yml
|
2018-09-24 14:30:52 -04:00 |
|
bohops
|
2a79b98b6a
|
Update Syssetup.yml
|
2018-09-24 14:29:33 -04:00 |
|
bohops
|
2c9043a8fe
|
Update Shell32.yml
|
2018-09-24 14:26:49 -04:00 |
|
bohops
|
e618d6eeb0
|
Update Shdocvw.yml
|
2018-09-24 14:08:10 -04:00 |
|
bohops
|
bd6580eee8
|
Update Setupapi.yml
|
2018-09-24 14:04:31 -04:00 |
|
bohops
|
6128b4ea62
|
Update Pcwutl.yml
|
2018-09-24 14:02:23 -04:00 |
|
bohops
|
d7fd801a4d
|
Update Mshtml.yml
|
2018-09-24 13:54:07 -04:00 |
|
bohops
|
46cee0e239
|
Update Advpack.yml
|
2018-09-24 13:52:23 -04:00 |
|
bohops
|
93a2dcc4c4
|
Update Ieadvpack.yml
|
2018-09-24 13:51:19 -04:00 |
|
bohops
|
42bcafa0ff
|
Update Ieframe.yml
|
2018-09-24 13:50:33 -04:00 |
|
bohops
|
3d7716bc14
|
Update Ieadvpack.yml
|
2018-09-24 13:49:04 -04:00 |
|
bohops
|
f9d4581396
|
Update Advpack.yml
|
2018-09-24 13:42:17 -04:00 |
|
bohops
|
26f5d809c4
|
Update Advpack.yml
|
2018-09-23 22:29:44 -04:00 |
|
bohops
|
b330d43116
|
Changed to latest template
|
2018-09-23 22:23:04 -04:00 |
|
Oddvar Moe
|
adafa6de3f
|
Update readme, began updating OSBins with new template
|
2018-09-24 01:50:14 +02:00 |
|
Conor Richard
|
e8c7042468
|
Removing duplicate file
|
2018-09-21 23:20:32 -04:00 |
|
Conor Richard
|
4335223a8b
|
Moving non-MS script to LOLUtilz, archive
|
2018-09-21 23:19:05 -04:00 |
|
Conor Richard
|
58e88b98f9
|
Completed template update of OterMSBinaries
|
2018-09-21 22:58:00 -04:00 |
|
Conor Richard
|
95dc80b8cd
|
Updated yml for: appvlp and bginfo.
|
2018-09-18 23:06:22 -04:00 |
|
Conor Richard
|
3266cb4d46
|
Testing new template display
|
2018-09-18 22:35:46 -04:00 |
|
Oddvar Moe
|
c949e100bd
|
MD files generate from Script, and adjustments to readme
|
2018-09-14 15:48:52 +02:00 |
|