living-off-the-land 开源项目推荐（44 个）

LOLBAS-Project /LOLBAS

Living Off The Land 二进制文件和脚本 -（LOLBins 和 LOLScripts）

api0cradle /LOLBAS

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

infosecB /LOOBins

Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in "living off the land" macOS binaries and how they can be used by threat actors for malicious purposes.

lolc2 /lolc2.github.io

lolC2 is a collection of C2 frameworks that leverage legitimate services to evade detection

dstours /OctoC2

GitHub-native command-and-control framework for authorized security research, with encrypted multi-channel transport and resilient failover.

TestingPens /MalwarePersistenceScripts

A collection of scripts I've written to help red and blue teams with malware persistence techniques.

Null-byte-00 /LOTL

Living Off The Land (LOTL) persistent Reverse shell

lolfsaas /lolfsaas.github.io

Living of the Land of Free SaaS

ripits-sec /goLoL

goLoL is a Windows host scanner with dual support for LOLBAS binaries and LOLDrivers. It lists LOLBAS techniques runnable at your current privilege level (with MITRE ATT&CK mappings) and can scan local .sys files for vulnerable/malicious LOLDrivers hash matches.

0xAnalyst /Project-Lost

Living Off Security Tools

lolexfil /lolexfil.github.io

Living off the land Data Exfiltration methods

TheMagicClaw /LOLAPI

Living Off The Land API

danzek /awesome-lol

Living off the Land (LOL) attack techniques, tools, and defender resources

0xvpr /Malicious-Software-Research

A repository dedicated to researching, documenting, developing, and ultimately, defending against various strains of malicious software.

aress31 /clm-rout

A C# program featuring an all-in-one bypass for CLM, AppLocker and AMSI using Runspace.

NotoriousRebel /Find-LOLBAS

Simple powershell script to find living off land binaries and scripts on a system.

Ilias1988 /LOLBins-Reference

A unified, interactive reference for Living Off The Land Binaries (LOLBAS & GTFOBins). Features a dynamic payload builder (LHOST/LPORT), real-time search, MITRE ATT&CK mapping, and auto-updates from official sources.

Excalibra /GhostLNK

GhostLNK is a professional-grade Windows LNK (shortcut) file generator with advanced stealth capabilities. It converts remote URLs (Dropbox, VPS, etc.) into PowerShell commands, encodes them in Base64, and embeds them into legitimate-looking LNK files that bypass modern AV detection.

hdks-bug /LOLGEN

LOLGEN: Living Off The Land Payload Generator

5yn7hp0w3r /LOLBAS-RUSSIAN

Русскоязычная адаптация проекта LOLBAS: 400+ техник «Living off the Land» в Excel, Markdown и JSON. Структурировано по категориям, с привязкой к MITRE ATT&CK, путями, привилегиями и методами обнаружения.