LOLBAS-Project-LOLBAS

admin/LOLBAS-Project-LOLBAS

Fork 0

mirror of https://github.com/LOLBAS-Project/LOLBAS synced 2026-06-21 13:43:46 +00:00

Commit Graph

Select branches

Hide Pull Requests

add_too_check_detection_urls

feat/add_missing_WDAC_bypasses

master

revert-170-fixes/mitre_attack_realignment

#1

#1

#101

#104

#105

#106

#107

#109

#110

#111

#112

#117

#118

#120

#121

#122

#125

#126

#127

#129

#130

#131

#132

#134

#135

#136

#140

#143

#144

#146

#147

#148

#149

#15

#150

#151

#152

#153

#154

#156

#158

#159

#160

#161

#162

#163

#164

#166

#167

#168

#169

#17

#170

#174

#175

#176

#177

#178

#179

#180

#182

#183

#184

#185

#186

#187

#188

#189

#19

#191

#192

#193

#194

#195

#196

#197

#197

#198

#199

#2

#2

#20

#201

#202

#203

#204

#205

#206

#207

#209

#210

#211

#213

#214

#216

#217

#219

#22

#220

#221

#222

#223

#224

#225

#226

#227

#228

#229

#23

#230

#233

#234

#235

#236

#236

#237

#238

#239

#240

#241

#242

#242

#244

#245

#25

#251

#252

#253

#255

#256

#259

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#27

#270

#271

#272

#273

#274

#276

#277

#278

#28

#280

#281

#283

#284

#286

#288

#29

#290

#290

#291

#292

#293

#294

#295

#296

#297

#298

#299

#300

#301

#303

#305

#306

#307

#308

#309

#310

#312

#314

#315

#317

#319

#319

#32

#320

#321

#321

#322

#323

#324

#325

#326

#327

#329

#330

#331

#332

#333

#334

#335

#336

#337

#338

#339

#340

#341

#342

#343

#343

#344

#345

#347

#348

#349

#350

#351

#352

#353

#354

#355

#356

#357

#358

#358

#359

#36

#360

#361

#362

#363

#364

#366

#367

#368

#369

#37

#370

#371

#372

#373

#374

#375

#376

#377

#378

#379

#38

#381

#382

#383

#384

#386

#387

#388

#389

#39

#390

#391

#392

#394

#396

#398

#398

#40

#400

#401

#401

#402

#403

#404

#405

#407

#408

#409

#410

#411

#413

#414

#416

#417

#418

#419

#42

#420

#422

#424

#425

#425

#426

#427

#428

#429

#430

#431

#432

#432

#433

#434

#435

#436

#437

#438

#439

#44

#440

#441

#442

#443

#444

#445

#446

#447

#448

#449

#45

#450

#451

#452

#453

#454

#455

#456

#457

#458

#459

#46

#460

#461

#462

#463

#464

#465

#466

#467

#468

#469

#470

#471

#472

#473

#474

#475

#475

#476

#477

#478

#478

#479

#48

#480

#482

#483

#484

#485

#486

#487

#489

#49

#490

#491

#492

#493

#495

#495

#496

#496

#497

#498

#499

#50

#502

#503

#504

#505

#506

#507

#508

#509

#51

#510

#511

#512

#52

#53

#54

#55

#56

#57

#58

#59

#60

#61

#63

#64

#66

#67

#70

#71

#72

#73

#74

#75

#76

#77

#79

#80

#81

#82

#87

#88

#89

#90

#92

#93

#94

#95

#96

#97

#98

#99

c24cad7868 Adding missing OperatingSystem values. xenoscr 2022-09-10 23:48:38 -04:00
371d1cf2cc Correcting case in Usecase key names. xenoscr 2022-09-10 23:45:28 -04:00
a040ca3e40 Adding missing OperatingSystem values to Ieadvpack.yml xenoscr 2022-09-10 23:41:38 -04:00
f5baac1c45 Adding missing authors xenoscr 2022-09-10 23:37:10 -04:00
700d181c7e Adding missing OperatingSystem key in Ilasm.yml xenoscr 2022-09-10 23:30:36 -04:00
d585695b08 Adding missing Descriptions. xenoscr 2022-09-10 23:26:10 -04:00
abb1034b00 Added missing description to Extexport.yml xenoscr 2022-09-10 23:08:46 -04:00
dd58662ee9 Correcting 'UAC bypass' to 'UAC Bypass' xenoscr 2022-09-10 22:58:06 -04:00
0ed1694bf1 Correcting 'AWL bypass' to 'AWL Bypass' xenoscr 2022-09-10 22:55:32 -04:00
8dd8928a8f Updating gh page workflow and correcting 'AWS bypass' to 'AWS Bypass' xenoscr 2022-09-10 22:53:33 -04:00
09e81d0bd1 Correcting Cmstp.yml Category value, case. xenoscr 2022-09-10 22:48:08 -04:00
5e0ae9c976 Correcting Cmstp.yml Category value. xenoscr 2022-09-10 22:46:13 -04:00
389b7e5bdd Updating schema, created as date. xenoscr 2022-09-10 22:43:02 -04:00
48ec17df1c Updating schema file. xenoscr 2022-09-10 22:36:43 -04:00
22481bcb71 Updating schema file. xenoscr 2022-09-10 22:32:51 -04:00
ee011e6281 Correcting schema xenoscr 2022-09-10 22:21:56 -04:00
ce36f924fc Removing extra --- from each yaml file xenoscr 2022-09-10 22:16:47 -04:00
0afb54868a Changing to proposed fixed checker cketti/action-pykwalify@v0.3-temp-fix xenoscr 2022-09-10 18:19:30 -04:00
3e57bc35c7 fixing versions xenoscr 2022-09-10 18:13:35 -04:00
285ef35e9b fixing indents xenoscr 2022-09-10 18:11:14 -04:00
059f2419df Attempting to fix pyKwalify checking xenoscr 2022-09-10 18:08:58 -04:00
73d02562cd Attempting to fix pyKwalify checking xenoscr 2022-09-10 18:05:47 -04:00
9955d4ea77 Adding pyKwalify checking xenoscr 2022-09-10 18:03:38 -04:00
f6761fad95 restoring push yamllint action xenoscr 2022-09-10 17:33:11 -04:00
e25a0e7cb8 lint changes for push xenoscr 2022-09-10 17:24:38 -04:00
c64d355075 lint changes for push xenoscr 2022-09-10 17:17:55 -04:00
26c7c40413 changing linter xenoscr 2022-09-10 17:06:21 -04:00
4990f5e81d fixing workflow xenoscr 2022-09-10 16:42:26 -04:00
f64f0d457e Changing linter xenoscr 2022-09-10 16:38:40 -04:00
68aff84291 adding config xenoscr 2022-09-10 07:22:41 -04:00
167ae89d1c update yaml-lint xenoscr 2022-09-10 07:02:01 -04:00
8810e30f0a Fix incorrect decodehex command syntax (#230) Ryan Stamp 2022-09-02 13:44:23 -04:00
68c14b894c Update UtilityFunctions.yml (#228) securepeacock 2022-09-02 13:42:59 -04:00
e1df4e9f83 Merge remote-tracking branch 'upstream/master' into windows_11_sprint Wietze 2022-09-02 17:23:45 +01:00
c5c227a7ba added sigma detection for pester Oddvar Moe 2022-08-24 12:32:48 +02:00
5a38aa722f Adjusted comment in command Oddvar Moe 2022-08-23 15:47:17 +02:00
4b99cadd85 Update pester.bat with an additional example Oddvar Moe 2022-08-23 15:44:57 +02:00
400158f2df Add sigma references to CL_LoadAssembly, CLMutexVerifiers entries (#221) Wietze 2022-09-02 17:16:58 +01:00
9b70f38986 Create Ldifde.yml Grzegorz Tworek 2022-08-31 17:58:30 +02:00
68a6f0a35f added sigma detection for pester Oddvar Moe 2022-08-24 12:32:48 +02:00
4b564464fd Added external reference for Rundll32 721574n 2022-08-24 12:11:31 +02:00
c53a8ea06e Adjusted comment in command Oddvar Moe 2022-08-23 15:47:17 +02:00
fdc1b2c827 Update pester.bat with an additional example Oddvar Moe 2022-08-23 15:44:57 +02:00
da469d0652 Doc update fslds 2022-08-08 20:40:26 +00:00
3162825fdc Split procdump name pattern into two actual names. fslds 2022-08-08 20:27:04 +00:00
55111b05b2 punctuation fslds 2022-08-08 20:22:58 +00:00
fbff11e632 Added explanatory comments fslds 2022-08-08 20:20:08 +00:00
c67eaec5cf Adding aliases key to YAML template fslds 2022-08-08 20:18:04 +00:00
8283d8d915 Delete Dllhost.yml Oddvar Moe 2022-06-09 10:51:40 +02:00
91350057ce Add sigma references to CL_LoadAssembly, CLMutexVerifiers entries (#221) $frack113$ frack113 2022-06-04 12:50:35 +02:00
539c1da0fa Merge branch 'master' into windows_11_sprint Wietze 2022-05-25 09:25:42 +01:00
0dc56e9148 Merge pull request #220 from tsale/patch-1 Chris "Lopi" Spehn 2022-05-24 17:33:07 -06:00
314f585da9 Update Hh.yml Kostas 2022-05-24 15:29:03 -07:00
aae794c59c Update Hh.yml Kostas 2022-05-24 14:23:18 -07:00
7797a1967c Merge branch 'master' into windows_11_sprint Wietze 2022-05-24 08:38:50 +01:00
f85eeb748a Add Sigma references to conhost, imewdbld, ie4uinit, ilasm, offlinescannershell and replace (#219) $frack113$ frack113 2022-05-23 13:35:58 +02:00
36945392ca Merge pull request #201 from wietze/new/Conhost Chris "Lopi" Spehn 2022-05-19 10:27:10 -06:00
e872ce028b Merge pull request #214 from jstnk9/master Chris "Lopi" Spehn 2022-05-19 10:21:21 -06:00
82f19b22e7 Merge pull request #217 from ManuelBerrueta/master Chris "Lopi" Spehn 2022-05-19 10:19:22 -06:00
68b772a567 Updated yml/OtherMSBinaries/Sqlps.yml, used recently in a campaign shared my Microsoft Security Intelligence. Would be useful reference for Red Teamers/Offensive Security Engineers as well as Blue Teamers/Defenders who reference this open source project/library. ManuelBerrueta 2022-05-19 07:12:37 -07:00
3ce3ec6656 Merge pull request #216 from TactiKoolSec/master Chris "Lopi" Spehn 2022-05-19 07:32:58 -06:00
90b6082f1d Update Rdrleakdiag.yml John Dwyer 2022-05-19 13:30:11 +00:00
e2493d8ccf Detection Resources and Other Updates (LOLBAS-Project#84) John Dwyer 2022-05-18 19:00:26 +00:00
d935f096fd Added rdrleakdiag dump John Dwyer 2022-05-18 18:58:04 +00:00
d1738b946b Adding various Sigma references (#213) $frack113$ frack113 2022-05-17 10:18:45 +02:00
3571a7ad88 Create AccCheckConsole.yml (#187) bohops 2022-05-15 16:55:16 -04:00
7c2f3231d3 Adding Dump64.exe (#182) mrd0x 2022-05-15 16:21:45 -04:00
b333db4f91 Fixing typo (ieaframe -> ieframe) Wietze 2022-05-15 21:06:33 +01:00
79f4cbdb7f Changed tid to T1105 for downloads (#195) akshat pradhan 2022-05-16 01:08:24 +05:30
00bc9177bd Added new sigma rule and references jstnk9 2022-05-15 16:42:44 +02:00
2b20998371 Remove redundant powershell command from comsvcs entry Wietze 2022-05-05 11:16:19 +01:00
b92ee99627 Addressing @bohops's feedback Wietze 2022-05-05 11:12:22 +01:00
d93539bf9b Quick fix for syntax and removed IOC bohops 2022-04-29 23:06:41 -04:00
666e6e8645 Update Desk.yml (#210) cr1sp4 2022-04-29 22:52:57 -04:00
619aafbfa2 Adding extra contributor to Desk.cpl entry Wietze 2022-04-28 13:01:35 +01:00
4a8bdf4844 Fix casing on Desk.cpl entry Wietze 2022-04-27 11:20:13 +01:00
6ed0fb9326 Create Desk.cpl (#207) LuxNoBu!!shit 2022-04-27 13:15:15 +03:00
e4261b1f02 Fixing typo Wietze 2022-04-26 16:59:14 +01:00
5c46dd63f5 Giving Hexacorn the proper credit Wietze 2022-04-07 15:50:39 +01:00
4df2e43c82 Adding Conhost.exe LOLBAS Wietze 2022-04-05 18:38:43 +01:00
55a7ea9a81 Fixing wlrmdr entry Wietze 2022-02-16 21:02:24 +00:00
12c85eb8f0 Create wlrmdr.yml (#194) Moshe Kaplan 2022-02-16 15:41:14 -05:00
a7f7ec2cc2 Changing ATT&CK TID of wuauclt.exe entry (#193) akshat pradhan 2022-01-24 03:54:59 +05:30
e40a6432a0 Merge branch 'LOLBAS-Project:master' into master Andrew Kisliakov 2022-01-17 08:16:16 +00:00
ada7f7f6c3 Microsoft Teams as a LOLbin Andrew Kisliakov 2022-01-17 08:11:47 +00:00
085aaa37b1 Adding more missed-out entries Wietze 2021-12-15 11:46:04 +00:00
52302853c9 Merge branch 'master' into windows_11_sprint Wietze 2021-12-14 17:39:36 +00:00
e51caad3dd Adding Windows 11 reference to missed-out executables Wietze 2021-12-14 16:57:56 +00:00
6793a7d238 Fixing various issues identified Wietze 2021-12-14 16:50:22 +00:00
adf171d089 Applying minor format changes (incorrectly formatted dates, typos, etc.) Wietze 2021-12-14 15:53:03 +00:00
754a451e76 Updating entries that have been confirmed to be working on Windows 11 (21H2) Wietze 2021-12-14 15:50:17 +00:00
39d4e815af Minor formatting changes (redudant backslashes, incorrect dates, typos, etc.) Wietze 2021-12-14 14:57:32 +00:00
7b208e8021 Change notice.txt to notice.md bohops 2021-12-12 14:47:44 -05:00
18bceb7639 Create Unregmp2.yml whickey-r7 2021-12-06 12:13:24 -05:00
17899acbb0 Adding Sigma references to ConfigSecurityPolicy, Diantz, ExtExport & Extrac32 (#184) $frack113$ frack113 2021-12-06 12:19:01 +01:00
2d28767c04 Adding new Sigma references (AppInstaller, AspnetCompiler, Bash, Certreq) (#183) $frack113$ frack113 2021-11-25 10:42:26 +01:00
f7b30775a4 Odbcconf realign to T1218.008, hh.exe to T1218.001 Wietze 2021-11-16 14:08:04 +00:00
23dd0236ae Detection Resources and Other Updates (#179) bohops 2021-11-15 08:19:03 -05:00
4860585fb7 Adding CustomShellHost.exe LOLBAS Wietze 2021-11-14 23:26:39 +00:00
2031916b1a ATT&CK realignment, typo fixes (#178) akshat pradhan 2021-11-14 22:57:17 +05:30

... 2 3 4 5 6 ...