{"adoption": {"forks": 344, "observed_at": "2026-08-28T04:05:11.172091+00:00", "stars": 1613}, "canonical_url": "https://ross.abutalabs.com/products/api0cradle-lolbas", "card": {"archived": true, "artifact_type": "dataset", "description": "Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)", "domain": ["security", "penetration-testing", "osint", "windows", "developer-tools"], "enriched": true, "function": ["security", "penetration-testing", "vulnerability-scanning", "developer-tools"], "health_score": 10, "homepage": null, "language": "XSLT", "license": null, "license_family": "other", "maturity": "maintenance", "member_repos": ["api0cradle/LOLBAS"], "name": "api0cradle/LOLBAS", "platform": ["windows", "cli", "self-hosted"], "pushed_at": "2018-12-10T17:33:15+00:00", "repo": "api0cradle/LOLBAS", "stars": 1613, "tags": ["lolbins", "red-team", "blue-team", "dfir", "threat-hunting", "knowledge-base", "living-off-the-land", "archived-repo"], "topics": ["lolbins", "lolscripts", "redteam", "blueteam", "purpleteam", "dfir", "living-off-the-land"], "urls": [], "use_cases": ["find lolbins that can download files on a windows host", "identify binaries attackers can abuse for persistence", "build detection rules for living-off-the-land techniques", "research uac bypass techniques using built-in windows binaries", "check if a binary can be used for defense evasion", "purple team exercise reference for attack techniques"], "what_it_is": "A curated knowledge base documenting Windows binaries, scripts, and libraries that can be abused for 'Living Off The Land' attack techniques such as code execution, file downloads, UAC bypass, and persistence. Each entry has its own markdown file describing usage examples for red, blue, and purple team work.", "when_to_avoid": ["you need the actively updated version - use the LOLAS-Project/LOLBAS repo and web portal instead", "you want an automated scanning or detection tool rather than documentation", "you need coverage for Linux or macOS binaries"], "when_to_choose": ["you need a reference catalog of abusable native Windows binaries and scripts", "you are writing detection rules or doing threat hunting for LOLBin abuse", "you run red or purple team exercises and need technique examples"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/api0cradle-lolbas", "repo": "api0cradle/LOLBAS", "role": "main", "score": 10}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:05:11.172091+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T03:51:05.362030+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c4734942d5273e58c943b20faab92ee0bd6a3f8b6cf3ee20b9460ae680806ce2", "fetched_at": "2026-08-28T04:05:11.172091+00:00", "kind": "readme", "missing": false, "url": "https://github.com/api0cradle/LOLBAS"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:05:11.172091+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T03:51:05.362030+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c4734942d5273e58c943b20faab92ee0bd6a3f8b6cf3ee20b9460ae680806ce2", "fetched_at": "2026-08-28T04:05:11.172091+00:00", "kind": "readme", "missing": false, "url": "https://github.com/api0cradle/LOLBAS"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T03:51:05.362030+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c4734942d5273e58c943b20faab92ee0bd6a3f8b6cf3ee20b9460ae680806ce2", "fetched_at": "2026-08-28T04:05:11.172091+00:00", "kind": "readme", "missing": false, "url": "https://github.com/api0cradle/LOLBAS"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:05:11.172091+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:05:11.172091+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:05:11.172091+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T03:51:05.362030+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c4734942d5273e58c943b20faab92ee0bd6a3f8b6cf3ee20b9460ae680806ce2", "fetched_at": "2026-08-28T04:05:11.172091+00:00", "kind": "readme", "missing": false, "url": "https://github.com/api0cradle/LOLBAS"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:05:11.172091+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:05:11.172091+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T03:51:05.362030+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c4734942d5273e58c943b20faab92ee0bd6a3f8b6cf3ee20b9460ae680806ce2", "fetched_at": "2026-08-28T04:05:11.172091+00:00", "kind": "readme", "missing": false, "url": "https://github.com/api0cradle/LOLBAS"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:05:11.172091+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:05:11.172091+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:05:11.172091+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T03:51:05.362030+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c4734942d5273e58c943b20faab92ee0bd6a3f8b6cf3ee20b9460ae680806ce2", "fetched_at": "2026-08-28T04:05:11.172091+00:00", "kind": "readme", "missing": false, "url": "https://github.com/api0cradle/LOLBAS"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:05:11.172091+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:05:11.172091+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T03:51:05.362030+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c4734942d5273e58c943b20faab92ee0bd6a3f8b6cf3ee20b9460ae680806ce2", "fetched_at": "2026-08-28T04:05:11.172091+00:00", "kind": "readme", "missing": false, "url": "https://github.com/api0cradle/LOLBAS"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T03:51:05.362030+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c4734942d5273e58c943b20faab92ee0bd6a3f8b6cf3ee20b9460ae680806ce2", "fetched_at": "2026-08-28T04:05:11.172091+00:00", "kind": "readme", "missing": false, "url": "https://github.com/api0cradle/LOLBAS"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T03:51:05.362030+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c4734942d5273e58c943b20faab92ee0bd6a3f8b6cf3ee20b9460ae680806ce2", "fetched_at": "2026-08-28T04:05:11.172091+00:00", "kind": "readme", "missing": false, "url": "https://github.com/api0cradle/LOLBAS"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T03:51:05.362030+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c4734942d5273e58c943b20faab92ee0bd6a3f8b6cf3ee20b9460ae680806ce2", "fetched_at": "2026-08-28T04:05:11.172091+00:00", "kind": "readme", "missing": false, "url": "https://github.com/api0cradle/LOLBAS"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 0, "longevity": 100, "rhythm": 35}, "computed_at": "2026-09-02T17:46:02.011165+00:00", "flags": ["no_releases", "archived", "no_license"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 3059, "days_push": 2823, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 10, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}