All pull requests

Pull requests

• Mshta.exe - proxy execution of an attacker DLL via user-writable InProcServer32 (not COM activation)

  #540·xhaabx opened Nov 9, 2026·

  ·

• feat(Ssh): add KnownHostsCommand pre-authentication execution technique

  #539·DevCop95 opened Nov 9, 2026Contributor·

  ·

• Add MpCmdRun.exe -DeviceControl -TestPolicyXml file read (Credentials)

  #538·s4dbrd opened Nov 7, 2026·

  ·

• Add HackITA LOLBins guide as a Regsvr32 resource

  #537·hack-ita opened Nov 5, 2026·

  ·

• Winget.exe: add configure (DSC Script resource) execute entry

  #536·Diablo-research opened Nov 4, 2026·

  ·

• Add WMIC guide to Wmic.yml Resources

  #535·hack-ita opened Nov 1, 2026·

  ·

• Cursor/findstr clickfix png palette 335f

  #534·josehelps opened Oct 27, 2026Contributor·

  ·
  2

• Add PermitLocalCommand technique to ssh.exe (#526)

  #532·DevCop95 opened Oct 11, 2026Contributor·

  ·
  1

• add wabmig.exe and build.bat

  #531·6en6ar opened Oct 8, 2026·

  ·
  1

• Add Curl.exe (Download/Upload)

  #530·defamp opened Oct 8, 2026·

  ·

• Add Robocopy.exe (Copy/Download)

  #529·defamp opened Oct 8, 2026·

  ·

• Add Astro website with searchable catalog and compatible data exports

  #528·MHaggis opened Oct 7, 2026·

  ·

• Add WWAHost.exe AppX-hosted JavaScript execution entry

  #527·Liran017 opened Oct 1, 2026Contributor·

  ·

• add entry for wslc.exe

  #514·unrooted opened Jul 17, 2026Contributor·

  ·
  2

• Add TextTransform.exe, TextTransformCore.exe, MSTest.exe and Microsoft.XslDebugger.Host.exe to the OtherMSBinaries category

  #496·Pumi96 opened Apr 2, 2026·

  ·
  18

  

• Added lli.yml

  #475·m3rcer opened Nov 3, 2025·

  ·
  2

  

• Add Code.yml

  #425·boku7 opened Mar 20, 2025Contributor·

  ·
  4

  

• Create LOLBINS_File_Info

  enhancement
  #398·marktsec opened Sep 14, 2024·

  ·
  2

  

• Create Auditpol.yml

  #358·M-khalifa1 opened Feb 24, 2024·

  ·
  2

  

• Add msohtmed.exe as an executor

  #290·C-h4ck-0 opened May 7, 2023Contributor·

  ·
  6

  

• Add Splunk detections to LOLBAS

  enhancement
  #242·josehelps opened Aug 11, 2022Contributor·

  ·
  5