LOLBAS-Project/LOLBAS
A curated collection of legitimate Windows binaries and scripts that attackers abuse to evade detection and achieve their objectives. Each entry documents the binary, its abuse techniques, and detection strategies. Essential reference for both red teamers planning attacks and defenders hunting for suspicious use of trusted system tools.