LOLBAS
Last updated
What is LOLBAS?
Living Off The Land Binaries and Scripts (LOLBAS) refers to the use of legitimate, pre-installed operating system tools and programs for malicious purposes. Instead of introducing new malware, attackers leverage these existing, trusted binaries to perform actions such as downloading files, executing code, or gathering information, often evading traditional security defenses that focus on detecting malicious software.
Free resources to learn LOLBAS
- Official docsLOLBAS Project
- ArticleUnderstanding the risks of LOLBAS in security
- VideoLOLBAS T1105, MS Process Abuse
More in stage 5: Cloud Skills and Knowledge
- Cloud Skills and Knowledge
- ISO
- RMF
- NIST
- CIS
- CSF
- GTFOBINS
- WADCOMS
- dig
- nmap
- ping
- arp
- cat
- dd
- Salting
- Hashing
- Key Exchange
- Phishing
- Whishing
- Whaling
- tail
- hping
- head
- grep
- nslookup
- Private vs Public Keys
- Smishing
- Spam vs Spim
- tracert
- winhex
- autopsy
- ipconfig
- PKI
- Obfuscation
- Shoulder Surfing
- Tailgating
- curl
- wireshark
- memdump
- Dumpster Diving
- Diamond Model
- Kill Chain
- Zero day
- FTK Imager
- ATT&CK
- Social Engineering
- Reconnaissance
- Impersonation
- ParrotOS
- Kali Linux
- Watering Hole Attack
- Drive by Attack
- SIEM
- SOAR
- Typo Squatting
- Brute Force vs Password Spray
- Event Logs
- syslogs
- netflow
- FTP vs SFTP
- SSL vs TLS
- IPSEC
- Packet Captures
- Firewall Logs
- DNSSEC
- LDAPS
- SRTP
- S/MIME
- DoS vs DDoS
- MITM
- CSRF
- Spoofing
- SQL Injection
- XSS
- MAC-based
- NAC-based
- Antivirus
- Antimalware
- EDR
- DLP
- Evil Twin
- VLAN Hopping
- Port Blocking
- Group Policy
- Firewall & Nextgen Firewall
- HIPS
- NIDS
- DNS Poisoning
- Sinkholes
- ACLs
- Patching
- NIPS
- Host Based Firewall
- Sandboxing
- Deauth Attack
- Jump Server
- Endpoint Security
- EAP vs PEAP
- WPS
- ACL
- Replay Attack
- WPA vs WPA2 vs WPA3 vs WEP
- Rogue Access Point
- VirusTotal
- urlscan
- any.run
- Preparation
- Identification
- Containment
- Buffer Overflow
- Joe Sandbox
- urlvoid
- WHOIS
- Eradication
- Recovery
- Lessons Learned
- Memory Leak
- Stakeholders
- HR
- Legal
- Pass the Hash
- Compliance
- Management
- Zero Day
- Known vs Unknown
- APT
- Directory Traversal
LOLBAS: common questions
Can I learn LOLBAS in Hindi?
This lesson is written in English. Once you sign in, open it in the interactive course and ask the AI tutor to explain LOLBAS in Hindi or Hinglish. The tutor answers from this lesson’s own text, so it stays on the syllabus, and it runs on your own Google, OpenAI or Anthropic key.
Is this LOLBAS tutorial for beginners?
It is lesson 153 of 301 in the free Cyber Security roadmap, in stage 5, Cloud Skills and Knowledge. If you are new to Cyber Security, start from stage 1 and come back here in order; if you already know the earlier stages, this lesson stands on its own.