A unified, interactive reference for Living Off The Land Binaries (LOLBAS & GTFOBins). Features a dynamic payload builder (LHOST/LPORT), real-time search, MITRE ATT&CK mapping, and auto-updates from official sources.
☆18Sep 13, 2026Updated last month
Alternatives and similar repositories for LOLBins-Reference
Users that are interested in LOLBins-Reference are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A zero-symbol static analysis engine that extracts and mathematically ranks the Windows RPC attack surface using an AHP-based risk model.☆15Aug 26, 2026Updated last month
- Talk to your Intel Management Engine directly — zero-dependency Python tool. Finds memory leaks, partition manifest, live MKHI probing. F…☆16Jul 30, 2026Updated 2 months ago
- shell script protector (obfuscation, embedded interpreter, DRM) - invisible to kernel tracing☆70Sep 23, 2026Updated 3 weeks ago
- How to Register your own AV with Defender☆37Aug 27, 2026Updated last month
- SoK/Whitepaper on Offensive Operations against Active Directory Certificate Service☆31Aug 29, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Obfuscator obfuscate using pure java bytecode virtual machine to interpret mutated java bytecodes of original java program.☆54Sep 11, 2026Updated last month
- Crystal Palace PICO loader for Sliver C2 dual-layer AMSI bypass, ETW silencing, AES-256-CBC encrypted payloads, 6 delivery variants☆47Aug 20, 2026Updated 2 months ago
- Credential and sensitive-data exposure triage for file shares☆16Aug 8, 2026Updated 2 months ago
- A command line process execution monitor for Windows.☆17Sep 2, 2026Updated last month
- Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscat…☆131Aug 22, 2026Updated 2 months ago
- A IDA CLI tool built on Rust, idalib-rs, and idalib. Supports batch and concurrent IDA analysis processes, design for stateless, agent fi…☆22Sep 15, 2026Updated last month
- Reddit OSINT by username. Discover indexed posts, comments, deleted and live content, activity patterns, exposed identifiers, and an over…☆34Oct 4, 2026Updated 2 weeks ago
- Nim-based encryption tool for obfuscating shellcode and payloads for evading Windows Defender.☆28Jul 14, 2026Updated 3 months ago
- open-source pentest management built to be operated by an AI agent☆28Sep 1, 2026Updated last month
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Autonomous 23-Source Zero-Cost OSINT, Binary Image Forensics (EXIF/GPS/Stego), Data Breach/Leak & Threat Intelligence Engine in Pure Pyth…☆28Sep 28, 2026Updated 3 weeks ago
- MCP server for automated binary diffing.☆20Oct 12, 2026Updated last week
- Cognitive Artifact Intelligence Research Network☆67Updated this week
- WINFLESHER v2.0 - ATTACK SURFACE SECURITY FRAMEWORK☆26Sep 21, 2026Updated last month
- Cloud dead-drop C2 framework — RSA-4096 + AES-256-GCM, 5 cloud providers, Rust-only agents, P2P mesh, persistence engine, credential harv…☆44Updated this week
- A macOS screen saver based on the iconic rain of characters and symbols known from the movie The Matrix☆35Oct 2, 2026Updated 2 weeks ago
- Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxi…☆16Jul 27, 2026Updated 2 months ago
- A stealthy stager designed for shellcode payloads staged with http/https like Sliver, or on github raw.☆64Jul 20, 2026Updated 3 months ago
- PowerShell toolkit for AMSI/Defender detection-boundary analysis and static malware triage maps byte offsets to detection triggers, plus …☆85Jul 28, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Advanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advance…☆119Sep 17, 2026Updated last month
- Reflective x64 Loader written in C/ASM☆15Dec 2, 2025Updated 10 months ago
- iOS Syscall Explorer for IDA 9.X☆15May 26, 2026Updated 4 months ago
- Flint is a terminal-first fork of Zed built for developers who use tools such as Codex, Claude Code, and Pi from the command line.☆21Sep 10, 2026Updated last month
- Application-scoped Windows network brownouts in native C and BOF form☆22Aug 18, 2026Updated 2 months ago
- Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opport…☆37Oct 1, 2026Updated 3 weeks ago
- Windows network scanner that finds AI/ML services and MCP servers on your network (shadow AI discovery). Signed, self-updating detection …☆39Updated this week
- Build guide for Red Teaming home lab. GOAD lab setup in Proxmox and pfSense, Operator/C2 and Redirectors.☆50Sep 26, 2026Updated 3 weeks ago
- Metroid Prime through Metaforce, native and optimized for MacOS, iOS, and iPadOS☆43Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- EntraTrace is a defensive security research tool for tracking and identifying the behavior of offensive tooling targeting Microsoft Entra…☆122Updated this week
- ☆44Sep 17, 2026Updated last month
- PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.☆41Sep 20, 2026Updated last month
- Linux Kernel Module designed to help analyze volatile memory in the linux kernel☆13Jul 17, 2018Updated 8 years ago
- Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.☆107Oct 1, 2026Updated 3 weeks ago
- ☆64Jul 8, 2026Updated 3 months ago
- ☆15Aug 14, 2026Updated 2 months ago