Skip to content
Simple powershell script to find living off land binaries and scripts on a system.
PowerShell
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
Find-LOLBAS.ps1
LICENSE
README.md

README.md

Find-LOLBAS

A simple Powershell script for enumerating living off the land binaries and scripts on a system.

Why

Manually verifying if the binaries or scripts are on the system
would take a while, with automating the process this increases overall productivity of redteamers
who need to quickly bypass applocker or need to execute code in unique ways.

How to Use?

By simply running the script the rest is taken care of!
The output will be on the screen for you to assess, it will be in the format
of the Binary or Script name, path, and an example command utilizing it.

License

This project is licensed under the BSD 3-Clause License - see the License file for details

Acknowledgments

This project wouldn't be possible without the LOLBAS project.

You can’t perform that action at this time.