A unified, interactive reference for Living Off The Land Binaries (LOLBAS & GTFOBins). Features a dynamic payload builder (LHOST/LPORT), real-time search, MITRE ATT&CK mapping, and auto-updates from official sources.
☆20Sep 13, 2026Updated last month
Alternatives and similar repositories for LOLBins-Reference
Users that are interested in LOLBins-Reference are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A zero-symbol static analysis engine that extracts and mathematically ranks the Windows RPC attack surface using an AHP-based risk model.☆16Aug 26, 2026Updated 2 months ago
- Ring -4 to Ring 0: offense-defense firmware research platform. We build the bootkits, then we catch them. Closed-loop. Zero trust in sili…☆15Oct 14, 2026Updated 3 weeks ago
- Argus — Local-first OSINT framework. 13 modules, 100% open source, zero API keys. AI chaining via Ollama. MCP server for Hermes/Claude Co…☆21Sep 29, 2026Updated last month
- shell script protector (obfuscation, embedded interpreter, DRM) - invisible to kernel tracing☆71Sep 23, 2026Updated last month
- Talk to your Intel Management Engine directly — zero-dependency Python tool. Finds memory leaks, partition manifest, live MKHI probing. F…☆20Jul 30, 2026Updated 3 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- SoK/Whitepaper on Offensive Operations against Active Directory Certificate Service☆31Aug 29, 2026Updated 2 months ago
- Crystal Palace PICO loader for Sliver C2 dual-layer AMSI bypass, ETW silencing, AES-256-CBC encrypted payloads, 6 delivery variants☆48Aug 20, 2026Updated 2 months ago
- Credential and sensitive-data exposure triage for file shares☆17Aug 8, 2026Updated 3 months ago
- How to Register your own AV with Defender☆38Aug 27, 2026Updated 2 months ago
- Fast, cross-platform CLI for finding secrets and sensitive data across filesystems, SMB, Active Directory, Microsoft 365, Slack, Jira and…☆33Updated this week
- Aggregate of my offensive (Red), DevOps (Green), and defensive (Blue) knowledge in the form of an Obsidian Vault hosted by an mkdocs-mate…☆10Nov 22, 2024Updated last year
- Web interface to visualize, filter, and analyze ldapdomaindump JSON files : attributes, ACLs, and AD attack paths in one place☆14Jul 29, 2026Updated 3 months ago
- Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscat…☆132Aug 22, 2026Updated 2 months ago
- open-source pentest management built to be operated by an AI agent☆30Sep 1, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆24Aug 30, 2026Updated 2 months ago
- ☆25Oct 27, 2026Updated 2 weeks ago
- WINFLESHER v2.0 - ATTACK SURFACE SECURITY FRAMEWORK☆26Sep 21, 2026Updated last month
- A command line process execution monitor for Windows.☆17Sep 2, 2026Updated 2 months ago
- Advanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advance…☆120Sep 17, 2026Updated last month
- Live terminal artifacts☆11Aug 20, 2026Updated 2 months ago
- Collection of rules and debug data for hashcat☆26Dec 2, 2025Updated 11 months ago
- Nim-based encryption tool for obfuscating shellcode and payloads for evading Windows Defender.☆29Jul 14, 2026Updated 3 months ago
- Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxi…☆17Jul 27, 2026Updated 3 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- A stealthy stager designed for shellcode payloads staged with http/https like Sliver, or on github raw.☆64Jul 20, 2026Updated 3 months ago
- Proof of concept for vulnerability from https://blog.ammaraskar.com/github-token-stealing☆20Jun 1, 2026Updated 5 months ago
- ☆15Aug 14, 2026Updated 2 months ago
- Autonomous 23-Source Zero-Cost OSINT, Binary Image Forensics (EXIF/GPS/Stego), Data Breach/Leak & Threat Intelligence Engine in Pure Pyth…☆28Updated this week
- Study trackers, Obsidian prep vaults, practice boxes and resources for Hack The Box certs: CJCA, CPTS, CWES, CDSA, CWEE, CAPE, CWPE, COAE…☆38Updated this week
- A small Windows local-privilege-escalation (LPE) misconfiguration auditor with a terminal UI, built with C++20 and FTXUI☆25Oct 23, 2026Updated 2 weeks ago
- ☆12Feb 26, 2024Updated 2 years ago
- iOS Syscall Explorer for IDA 9.X☆15May 26, 2026Updated 5 months ago
- SAML hacking pipeline for Claude Code☆13Aug 19, 2026Updated 2 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Object File (BOF) that demonstrates privilege escalation through a misconfigured AlwaysInstallElevated policy.☆13Sep 17, 2026Updated last month
- asmsense: a small model that names and describes functions in stripped x86-64 binaries. Open dataset, baselines, and LoRA experiments.☆20Updated this week
- A agentic Intel to hunt pipeline. Get hunting faster☆16Oct 19, 2026Updated 3 weeks ago
- sKaleQL is an opinionated template repository for managing, executing, and organizing Kusto Query Language (KQL) queries against Azure Lo…☆21May 20, 2025Updated last year
- Advanced OPSEC & Privacy Shield – Protect your digital footprint during OSINT operations and everyday browsing.☆19Sep 2, 2026Updated 2 months ago
- PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.☆43Sep 20, 2026Updated last month
- A defensive decompilation layer: Ghidra facts, lifted into runnable Python & artifacts aiding analysis.☆16Aug 7, 2026Updated 3 months ago
Are these results useful?