public-mirrors/LOLBAS
1
0
Fork 0
mirror of https://github.com/LOLBAS-Project/LOLBAS synced 2024-12-25 14:29:24 +01:00
Code Issues Projects Releases Wiki Activity
431 Commits 4 Branches 0 Tags 11 MiB
4f7ec8d2af
Commit Graph

431 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Oddvar Moe
3b848e6121
Merge pull request #160 from bohops/master 
WDAC Bypass additions, LOLScript additions, and a few updates
 2021-09-29 12:30:34 +02:00
bohops
741d0f7b36
Update CL_LoadAssembly.yml 2021-09-26 23:35:01 -04:00
root
b5357cdec0 Adding app-ctrl bypass bins and a few lolscripts 2021-09-26 23:31:30 -04:00
bohops
c48a5ea1ea
Merge pull request #159 from timwhitez/master 
Create VSIISExeLauncher.yml
 2021-09-25 22:51:39 -04:00
bohops
3475ce1213
Merge pull request #158 from JohnLaTwC/patch-1 
Add lolbin for fltMC.exe
 2021-09-25 22:47:30 -04:00
bohops
cab273394a
Merge pull request #126 from ahmadalsabagh/fix 
Fixed the resources link
 2021-09-25 22:30:23 -04:00
bohops
6c20e750e8
Merge pull request #144 from defensivedepth/patch-1 
Fix ART link
 2021-09-25 22:22:42 -04:00
bohops
198b421d15
Merge pull request #130 from whickey-r7/patch-3 
Create IMEWDBLD.yml
 2021-09-25 22:07:23 -04:00
bohops
c51df24076
Merge pull request #129 from SpookySec/cdb-update 
edited cdb.yml
 2021-09-25 21:40:09 -04:00
TimWhite
9336b4d599
Update VSIISExeLauncher.yml 2021-09-24 15:28:39 +08:00
TimWhite
559d9bc3ff
Create VSIISExeLauncher.yml 2021-09-24 15:28:01 +08:00
John Lambert
ecbc2f817f
Add lolbin for fltMC.exe 
Used by redteams for defense evasion to disable drivers used by agents like sysmon

https://www.darkoperator.com/blog/2018/10/5/operating-offensively-against-sysmon
https://github.com/oddcod3/Phantom-Evasion/blob/master/Modules/post-exploitation/Postex_CMD_UnloadSysmonDriver_windows.py
 2021-09-18 17:43:59 -07:00
Ruben
bb73c013fb
Update Finger.yml 
Fixed header and footer
 2021-08-30 13:30:52 +02:00
Rubén
670a5f1870 Create Finger.exe 2021-08-30 13:16:08 +02:00
Elliot Killick
6e047908a4
Create OneDriveStandaloneUpdater.yml 2021-08-28 05:16:35 -04:00
Elliot Killick
02207882f6
Create cmdl32.yml 2021-08-28 00:55:50 -04:00
Elliot Killick
3b1fd0ea8e
Create SettingSyncHost.yml 2021-08-26 13:35:15 -04:00
Elliot Killick
692a3bf4c2
Remove .exe from command and increase specificity 2021-08-26 12:49:43 -04:00
Elliot Killick
34af96f564
Remove .exe from command 2021-08-26 12:21:34 -04:00
Elliot Killick
084fb83984
Remove .exe from command and increase specificity 2021-08-26 12:07:04 -04:00
bohops
f51a70c03e
Merge pull request #143 from Efraim-Kaplan/patch-1 
Fixed Typo
 2021-08-26 09:08:40 -04:00
bohops
788d16289a
Merge pull request #132 from pgmcgee/patch-1 
Fix a typo in Findstr.yml
 2021-08-26 09:06:49 -04:00
Elliot Killick
26a15f55cf
Create OfflineScannerShell.yml 2021-08-16 19:46:47 -04:00
Elliot Killick
95baee85fd
Create WorkFolders.yml 2021-08-16 19:42:32 -04:00
Elliot Killick
63af8cca3b
Add resources section and improve formatting 2021-07-10 11:54:35 -04:00
Josh Brower
87c3319ad4
Fix ART link 2021-07-06 13:56:24 -04:00
Efraim-Kaplan
ebf494ae4d
FIxed typo 
Replaced "handeling" with "handling".
 2021-07-02 17:33:53 -04:00
Elliot Killick
8f705bb7a4
Create PrintBrm.yml 
New lolbin for zipping & unzipping to and from UNC paths and ADS. The zip file could also serve as a useful form of obfuscation for evading detection.
 2021-06-22 02:11:27 +00:00
Parker McGee
bbf14cf4b9
Fix a typo in Findstr.yml 
`finstr.exe` should be `findstr.exe`
 2021-03-20 16:40:37 -04:00
Filipe Spencer Lopes
79cf7bfb88 Adding pull_requests to the action list 2021-03-09 16:46:38 +01:00
Filipe Spencer Lopes
3993c5f053 removing newline 2021-03-09 16:46:24 +01:00
Filipe Spencer Lopes
8a31d0d1b4 Removing second yamllint action 2021-03-09 16:40:24 +01:00
Filipe Spencer Lopes
05a6dc1ccb Removing second document start. 2021-03-09 16:21:25 +01:00
Filipe Spencer Lopes
0da2e5e687 also run on push 2021-03-09 15:25:35 +01:00
Filipe Spencer Lopes
911004a924 Testing other yamllint action 2021-03-09 15:23:15 +01:00
Filipe Spencer Lopes
26eeb8eb1e Setting yamllinting to config file 2021-03-09 15:06:22 +01:00
Filipe Spencer Lopes
67bfb8cbfe changing yammlint to set indentations to warning 2021-03-09 15:05:21 +01:00
Filipe Spencer Lopes
29acd82968 putting quotes around strings with special chars 2021-03-09 15:04:09 +01:00
Filipe Spencer Lopes
ff9f5cff3d Removing blank lines 2021-03-09 15:00:55 +01:00
Filipe Spencer Lopes
b0a321e4c4 Too many whitespaces 2021-03-09 14:58:44 +01:00
Filipe Spencer Lopes
a232cfa007 Too many empty lines 2021-03-09 14:57:47 +01:00
Filipe Spencer Lopes
13901ea496 Too many whitespaces 2021-03-09 14:57:01 +01:00
Filipe Spencer Lopes
56035a7d10 Too many whitespaces 2021-03-09 14:56:47 +01:00
Filipe Spencer Lopes
85f25672a8 Adding rules 2021-03-09 14:56:22 +01:00
Filipe Spencer Lopes
75fa0cd6e3 test for pattern 2021-03-09 14:36:19 +01:00
Filipe Spencer Lopes
487af0347d no more pattern. 2021-03-09 14:34:40 +01:00
Filipe Spencer Lopes
a2bfd8a28d ugh, patterns. 2021-03-09 14:32:54 +01:00
Filipe Spencer Lopes
fda371bec0 Another pattern change 2021-03-09 14:28:09 +01:00
Filipe Spencer Lopes
4fa217f9c3 Changing matching pattern 2021-03-09 14:23:27 +01:00
Filipe Spencer Lopes
a4d37e4c60 Extension used is yml, not yaml. 2021-03-09 14:22:06 +01:00