LOLBAS (Living Off The Land Binaries, Scripts and Libraries)
LOLBAS (Living Off The Land Binaries, Scripts and Libraries)
The LOLBAS project catalogues Windows binaries, scripts and libraries that attackers can misuse for execution, download, persistence or application-allowlist bypass, with each entry mapped to MITRE ATT&CK techniques and listing detections. Data is available as a single JSON or CSV file and as per-entry YAML on GitHub.
Required Attribution:
GPL v3 terms apply to copies of the repository content: keep the licence and copyright notices.
Coverage
Windows binaries, scripts and libraries. The site title is "Living Off The Land Binaries, Scripts and Libraries" and its API page lists /api/lolbas.json, /api/lolbas.csv and the raw YAML files. Community-maintained; defensive reference with no malware or exploit code.
Verdict
Keyless JSON, CSV and YAML files from a community project on GitHub. Licence: Custom: the repository's LICENSE file carries the "GNU GENERAL PUBLIC LICENSE" version 3 text without saying 'only' or 'or later', so no SPDX id is used. Rate limits: Not stated. Signal Lab links only.
Get the free weekly email
Free weekly email of newly verified free data. Unsubscribe by emailing us.
By entering your email and clicking Subscribe, you agree to receive the Signal Lab weekly email from Quantum Data Technologies Ltd., 3200-650 West Georgia Street, Vancouver, BC V6B 4P7, Canada (signal-lab@qdt.ai). You can unsubscribe at any time: reply "unsubscribe" to any email or write to signal-lab@qdt.ai. See our Privacy Policy.
Information and education only. Not financial, investment, legal or tax advice. Listings can be inaccurate, incomplete or out of date and are provided "as is". Free tiers, limits and licenses belong to each provider and can change, so check the provider's own terms before you rely on them. Terms & Disclaimer