LOLBAS

public-mirrors/LOLBAS

Fork 0

mirror of https://github.com/LOLBAS-Project/LOLBAS synced 2025-11-04 10:39:56 +01:00

Commit Graph

Select branches

Hide Pull Requests

add_too_check_detection_urls

feat/add_missing_WDAC_bypasses

master

revert-170-fixes/mitre_attack_realignment

#1

#1

#101

#104

#105

#106

#107

#109

#110

#111

#112

#117

#118

#120

#121

#122

#125

#126

#127

#129

#130

#131

#132

#134

#135

#136

#140

#143

#144

#146

#147

#148

#149

#15

#150

#151

#152

#153

#154

#156

#158

#159

#160

#161

#162

#163

#164

#166

#167

#168

#169

#17

#170

#174

#175

#176

#177

#178

#179

#180

#182

#183

#184

#185

#186

#187

#188

#189

#19

#191

#192

#193

#194

#195

#196

#197

#197

#198

#199

#2

#2

#20

#201

#202

#203

#204

#205

#206

#207

#209

#210

#211

#213

#214

#216

#217

#219

#22

#220

#221

#222

#223

#224

#225

#226

#227

#228

#229

#23

#230

#233

#234

#235

#236

#236

#237

#238

#239

#240

#241

#242

#242

#244

#245

#25

#251

#252

#253

#255

#256

#259

#260

#261

#262

#263

#264

#265

#265

#266

#267

#268

#269

#27

#270

#271

#272

#273

#274

#274

#276

#277

#278

#28

#280

#281

#283

#284

#286

#288

#29

#290

#290

#291

#292

#293

#294

#295

#296

#297

#298

#299

#300

#301

#303

#305

#306

#307

#308

#309

#310

#312

#314

#315

#317

#319

#319

#32

#320

#321

#321

#322

#323

#324

#325

#326

#327

#329

#330

#331

#332

#333

#334

#335

#336

#337

#338

#339

#340

#341

#341

#342

#343

#343

#344

#345

#347

#348

#349

#350

#351

#352

#353

#354

#355

#356

#357

#358

#358

#359

#36

#360

#361

#362

#363

#364

#366

#367

#368

#369

#37

#370

#371

#372

#373

#374

#375

#376

#377

#378

#379

#38

#381

#382

#383

#384

#386

#387

#388

#388

#389

#39

#390

#391

#392

#394

#396

#398

#398

#40

#400

#401

#401

#402

#403

#404

#405

#407

#408

#409

#410

#411

#413

#414

#416

#417

#418

#419

#42

#420

#422

#424

#425

#425

#426

#427

#428

#429

#430

#431

#432

#432

#433

#434

#435

#436

#437

#438

#439

#44

#440

#440

#441

#442

#443

#444

#445

#446

#447

#448

#448

#449

#45

#450

#451

#452

#453

#454

#455

#456

#457

#458

#458

#459

#46

#460

#460

#461

#462

#462

#463

#464

#464

#465

#466

#467

#468

#468

#469

#469

#470

#470

#471

#472

#473

#474

#475

#475

#48

#49

#50

#51

#52

#53

#54

#55

#56

#57

#58

#59

#60

#61

#63

#64

#66

#67

#70

#71

#72

#73

#74

#75

#76

#77

#79

#80

#81

#82

#87

#88

#89

#90

#92

#93

#94

#95

#96

#97

#98

#99

9955d4ea77 Adding pyKwalify checking xenoscr 2022-09-10 18:03:38 -04:00
f6761fad95 restoring push yamllint action xenoscr 2022-09-10 17:33:11 -04:00
e25a0e7cb8 lint changes for push xenoscr 2022-09-10 17:24:38 -04:00
c64d355075 lint changes for push xenoscr 2022-09-10 17:17:55 -04:00
26c7c40413 changing linter xenoscr 2022-09-10 17:06:21 -04:00
4990f5e81d fixing workflow xenoscr 2022-09-10 16:42:26 -04:00
f64f0d457e Changing linter xenoscr 2022-09-10 16:38:40 -04:00
68aff84291 adding config xenoscr 2022-09-10 07:22:41 -04:00
167ae89d1c update yaml-lint xenoscr 2022-09-10 07:02:01 -04:00
8810e30f0a Fix incorrect decodehex command syntax (#230) Ryan Stamp 2022-09-02 13:44:23 -04:00
68c14b894c Update UtilityFunctions.yml (#228) securepeacock 2022-09-02 13:42:59 -04:00
e1df4e9f83 Merge remote-tracking branch 'upstream/master' into windows_11_sprint Wietze 2022-09-02 17:23:45 +01:00
c5c227a7ba added sigma detection for pester Oddvar Moe 2022-08-24 12:32:48 +02:00
5a38aa722f Adjusted comment in command Oddvar Moe 2022-08-23 15:47:17 +02:00
4b99cadd85 Update pester.bat with an additional example Oddvar Moe 2022-08-23 15:44:57 +02:00
400158f2df Add sigma references to CL_LoadAssembly, CLMutexVerifiers entries (#221) Wietze 2022-09-02 17:16:58 +01:00
9b70f38986 Create Ldifde.yml Grzegorz Tworek 2022-08-31 17:58:30 +02:00
68a6f0a35f added sigma detection for pester Oddvar Moe 2022-08-24 12:32:48 +02:00
4b564464fd Added external reference for Rundll32 721574n 2022-08-24 12:11:31 +02:00
c53a8ea06e Adjusted comment in command Oddvar Moe 2022-08-23 15:47:17 +02:00
fdc1b2c827 Update pester.bat with an additional example Oddvar Moe 2022-08-23 15:44:57 +02:00
da469d0652 Doc update fslds 2022-08-08 20:40:26 +00:00
3162825fdc Split procdump name pattern into two actual names. fslds 2022-08-08 20:27:04 +00:00
55111b05b2 punctuation fslds 2022-08-08 20:22:58 +00:00
fbff11e632 Added explanatory comments fslds 2022-08-08 20:20:08 +00:00
c67eaec5cf Adding aliases key to YAML template fslds 2022-08-08 20:18:04 +00:00
8283d8d915 Delete Dllhost.yml Oddvar Moe 2022-06-09 10:51:40 +02:00
91350057ce Add sigma references to CL_LoadAssembly, CLMutexVerifiers entries (#221) $frack113$ frack113 2022-06-04 12:50:35 +02:00
539c1da0fa Merge branch 'master' into windows_11_sprint Wietze 2022-05-25 09:25:42 +01:00
0dc56e9148 Merge pull request #220 from tsale/patch-1 Chris "Lopi" Spehn 2022-05-24 17:33:07 -06:00
314f585da9 Update Hh.yml Kostas 2022-05-24 15:29:03 -07:00
aae794c59c Update Hh.yml Kostas 2022-05-24 14:23:18 -07:00
7797a1967c Merge branch 'master' into windows_11_sprint Wietze 2022-05-24 08:38:50 +01:00
f85eeb748a Add Sigma references to conhost, imewdbld, ie4uinit, ilasm, offlinescannershell and replace (#219) $frack113$ frack113 2022-05-23 13:35:58 +02:00
36945392ca Merge pull request #201 from wietze/new/Conhost Chris "Lopi" Spehn 2022-05-19 10:27:10 -06:00
e872ce028b Merge pull request #214 from jstnk9/master Chris "Lopi" Spehn 2022-05-19 10:21:21 -06:00
82f19b22e7 Merge pull request #217 from ManuelBerrueta/master Chris "Lopi" Spehn 2022-05-19 10:19:22 -06:00
68b772a567 Updated yml/OtherMSBinaries/Sqlps.yml, used recently in a campaign shared my Microsoft Security Intelligence. Would be useful reference for Red Teamers/Offensive Security Engineers as well as Blue Teamers/Defenders who reference this open source project/library. ManuelBerrueta 2022-05-19 07:12:37 -07:00
3ce3ec6656 Merge pull request #216 from TactiKoolSec/master Chris "Lopi" Spehn 2022-05-19 07:32:58 -06:00
90b6082f1d Update Rdrleakdiag.yml John Dwyer 2022-05-19 13:30:11 +00:00
e2493d8ccf Detection Resources and Other Updates (LOLBAS-Project#84) John Dwyer 2022-05-18 19:00:26 +00:00
d935f096fd Added rdrleakdiag dump John Dwyer 2022-05-18 18:58:04 +00:00
d1738b946b Adding various Sigma references (#213) $frack113$ frack113 2022-05-17 10:18:45 +02:00
3571a7ad88 Create AccCheckConsole.yml (#187) bohops 2022-05-15 16:55:16 -04:00
7c2f3231d3 Adding Dump64.exe (#182) mrd0x 2022-05-15 16:21:45 -04:00
b333db4f91 Fixing typo (ieaframe -> ieframe) Wietze 2022-05-15 21:06:33 +01:00
79f4cbdb7f Changed tid to T1105 for downloads (#195) akshat pradhan 2022-05-16 01:08:24 +05:30
00bc9177bd Added new sigma rule and references jstnk9 2022-05-15 16:42:44 +02:00
2b20998371 Remove redundant powershell command from comsvcs entry Wietze 2022-05-05 11:16:19 +01:00
b92ee99627 Addressing @bohops's feedback Wietze 2022-05-05 11:12:22 +01:00
d93539bf9b Quick fix for syntax and removed IOC bohops 2022-04-29 23:06:41 -04:00
666e6e8645 Update Desk.yml (#210) cr1sp4 2022-04-29 22:52:57 -04:00
619aafbfa2 Adding extra contributor to Desk.cpl entry Wietze 2022-04-28 13:01:35 +01:00
4a8bdf4844 Fix casing on Desk.cpl entry Wietze 2022-04-27 11:20:13 +01:00
6ed0fb9326 Create Desk.cpl (#207) LuxNoBu!!shit 2022-04-27 13:15:15 +03:00
e4261b1f02 Fixing typo Wietze 2022-04-26 16:59:14 +01:00
5c46dd63f5 Giving Hexacorn the proper credit Wietze 2022-04-07 15:50:39 +01:00
4df2e43c82 Adding Conhost.exe LOLBAS Wietze 2022-04-05 18:38:43 +01:00
55a7ea9a81 Fixing wlrmdr entry Wietze 2022-02-16 21:02:24 +00:00
12c85eb8f0 Create wlrmdr.yml (#194) Moshe Kaplan 2022-02-16 15:41:14 -05:00
a7f7ec2cc2 Changing ATT&CK TID of wuauclt.exe entry (#193) akshat pradhan 2022-01-24 03:54:59 +05:30
e40a6432a0 Merge branch 'LOLBAS-Project:master' into master Andrew Kisliakov 2022-01-17 08:16:16 +00:00
ada7f7f6c3 Microsoft Teams as a LOLbin Andrew Kisliakov 2022-01-17 08:11:47 +00:00
085aaa37b1 Adding more missed-out entries Wietze 2021-12-15 11:46:04 +00:00
52302853c9 Merge branch 'master' into windows_11_sprint Wietze 2021-12-14 17:39:36 +00:00
e51caad3dd Adding Windows 11 reference to missed-out executables Wietze 2021-12-14 16:57:56 +00:00
6793a7d238 Fixing various issues identified Wietze 2021-12-14 16:50:22 +00:00
adf171d089 Applying minor format changes (incorrectly formatted dates, typos, etc.) Wietze 2021-12-14 15:53:03 +00:00
754a451e76 Updating entries that have been confirmed to be working on Windows 11 (21H2) Wietze 2021-12-14 15:50:17 +00:00
39d4e815af Minor formatting changes (redudant backslashes, incorrect dates, typos, etc.) Wietze 2021-12-14 14:57:32 +00:00
7b208e8021 Change notice.txt to notice.md bohops 2021-12-12 14:47:44 -05:00
18bceb7639 Create Unregmp2.yml whickey-r7 2021-12-06 12:13:24 -05:00
17899acbb0 Adding Sigma references to ConfigSecurityPolicy, Diantz, ExtExport & Extrac32 (#184) $frack113$ frack113 2021-12-06 12:19:01 +01:00
2d28767c04 Adding new Sigma references (AppInstaller, AspnetCompiler, Bash, Certreq) (#183) $frack113$ frack113 2021-11-25 10:42:26 +01:00
f7b30775a4 Odbcconf realign to T1218.008, hh.exe to T1218.001 Wietze 2021-11-16 14:08:04 +00:00
23dd0236ae Detection Resources and Other Updates (#179) bohops 2021-11-15 08:19:03 -05:00
4860585fb7 Adding CustomShellHost.exe LOLBAS Wietze 2021-11-14 23:26:39 +00:00
2031916b1a ATT&CK realignment, typo fixes (#178) akshat pradhan 2021-11-14 22:57:17 +05:30
f73ce77004 Project License and Notice (#175) bohops 2021-11-13 09:29:14 -05:00
53a4070205 Fixed formating akshat pradhan 2021-11-09 08:16:34 +05:30
33a8da933c Added AWL Bypass to Ssh.yml akshat pradhan 2021-11-09 08:14:43 +05:30
dfc7d40b1f Create Ssh akshat pradhan 2021-11-08 22:21:37 +05:30
11a62e618e Added notice.txt reference bohops 2021-11-07 15:46:44 -05:00
cdf3bd7591 Addint notice.txt for license information bohops 2021-11-07 15:43:06 -05:00
61a3d97fad Revert "MITRE ATT&CK realignment sprint" revert-170-fixes/mitre_attack_realignment bohops 2021-11-05 20:22:14 -04:00
03362b8640 Merge pull request #170 from wietze/fixes/mitre_attack_realignment bohops 2021-11-05 20:17:10 -04:00
2380c506d4 LSASS realign to T1003.001 Wietze 2021-11-05 20:35:58 +00:00
df8c88f4ca Remaping NTDS entries to T1003.003 Wietze 2021-11-05 20:32:44 +00:00
8257d60aad Realigning .ps1 scripts to T1216 Wietze 2021-11-05 20:29:07 +00:00
bc51cb4e03 More changes (mainly changing some T1218 instances to T1202) Wietze 2021-11-05 20:17:04 +00:00
2577066af9 More changes (mainly changing generic T1218 to dev-specific T1127) Wietze 2021-11-05 20:06:57 +00:00
8286677dac Applying more specific subtechniques to Verclsid Wietze 2021-11-05 19:38:21 +00:00
80e3f67e44 Applying more specific subtechniques to At/Schtasks, closes LOLBAS-Project/LOLBAS#113 Wietze 2021-11-05 19:33:48 +00:00
4f7ec8d2af MITRE ATT&CK realignment sprint Wietze 2021-11-05 18:58:26 +00:00
97f5042a58 Update Certoc.yml (#168) Ensar Şamil 2021-10-27 12:02:52 +03:00
5db35bb397 Updated msbuild with logger technique Oddvar Moe 2021-10-26 00:27:35 +02:00
7aeed60864 Updated msbuild with logger technique Oddvar Moe 2021-10-26 00:19:57 +02:00
b91c7ddab5 Updated msbuild with logger technique Oddvar Moe 2021-10-26 00:17:08 +02:00
57b66da28e Merge pull request #167 from LOLBAS-Project/features/github-action-improvements Oddvar Moe 2021-10-26 00:03:32 +02:00
0063238c23 Only perform Action on the main branch - will prevent test from failing on forks Wietze 2021-10-25 22:44:05 +01:00

... 2 3 4 5 6 ...