{"adoption": {"forks": 1172, "observed_at": "2026-08-28T04:10:25.695675+00:00", "stars": 8771}, "canonical_url": "https://ross.abutalabs.com/products/lolbas", "card": {"archived": false, "artifact_type": "dataset", "description": "Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)", "domain": ["security", "penetration-testing", "windows", "developer-tools"], "enriched": true, "function": ["security", "penetration-testing", "vulnerability-scanning", "documentation"], "health_score": 80, "homepage": "https://lolbas-project.github.io", "language": "XSLT", "license": "GPL-3.0", "license_family": "copyleft", "maturity": "active", "member_repos": ["LOLBAS-Project/LOLBAS"], "name": "LOLBAS-Project/LOLBAS", "platform": ["windows", "cli"], "pushed_at": "2026-08-26T18:11:51+00:00", "repo": "LOLBAS-Project/LOLBAS", "stars": 8771, "tags": ["lolbins", "red-team", "blue-team", "dfir", "threat-hunting", "mitre-attack", "yml-database", "gtfobins", "web-server"], "topics": ["lolbins", "lolscripts", "redteam", "blueteam", "purpleteam", "dfir", "living-off-the-land"], "urls": [], "use_cases": ["find windows binaries that can download files for red team tradecraft", "look up which LOLBins map to a MITRE ATT&CK technique", "hunt for abuse of signed microsoft binaries in DFIR investigations", "document application whitelisting bypass techniques", "find LOLBins for UAC bypass or credential theft", "compare windows LOLBins against unix GTFOBins equivalents"], "what_it_is": "A curated dataset of YML files documenting Windows binaries, scripts, and libraries that can be abused for 'Living Off The Land' techniques like code execution, downloads, persistence, and UAC bypass. It powers a searchable frontend at lolbas-project.github.io with MITRE ATT&CK mappings.", "when_to_avoid": ["you need UNIX/Linux equivalents - use GTFOBins instead", "you are looking for malicious Windows drivers - use loldrivers.io", "you need an offensive tool that executes techniques rather than documents them"], "when_to_choose": ["you need a reference of Microsoft-signed binaries with unexpected offensive functionality", "you are doing red team, purple team, or detection engineering on Windows", "you want ATT&CK-mapped documentation of LOLBin techniques"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/lolbas", "repo": "LOLBAS-Project/LOLBAS", "role": "main", "score": 77}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:10:25.695675+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-29T17:25:14.030591+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6c589d93b6818ff2b01ac5a65bc947d3375acbf5a68878e2666003179f1cd18c", "fetched_at": "2026-08-28T04:10:25.695675+00:00", "kind": "readme", "missing": false, "url": "https://github.com/LOLBAS-Project/LOLBAS"}, {"content_hash": "1c5b1e78e5c91c3effaa472295a64cdce2cd9dbf788eeceae3ebebb137bdb69e", "fetched_at": "2026-08-29T08:25:25.411444+00:00", "kind": "homepage", "missing": false, "url": "https://lolbas-project.github.io"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:10:25.695675+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-29T17:25:14.030591+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6c589d93b6818ff2b01ac5a65bc947d3375acbf5a68878e2666003179f1cd18c", "fetched_at": "2026-08-28T04:10:25.695675+00:00", "kind": "readme", "missing": false, "url": "https://github.com/LOLBAS-Project/LOLBAS"}, {"content_hash": "1c5b1e78e5c91c3effaa472295a64cdce2cd9dbf788eeceae3ebebb137bdb69e", "fetched_at": "2026-08-29T08:25:25.411444+00:00", "kind": "homepage", "missing": false, "url": "https://lolbas-project.github.io"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-29T17:25:14.030591+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6c589d93b6818ff2b01ac5a65bc947d3375acbf5a68878e2666003179f1cd18c", "fetched_at": "2026-08-28T04:10:25.695675+00:00", "kind": "readme", "missing": false, "url": "https://github.com/LOLBAS-Project/LOLBAS"}, {"content_hash": "1c5b1e78e5c91c3effaa472295a64cdce2cd9dbf788eeceae3ebebb137bdb69e", "fetched_at": "2026-08-29T08:25:25.411444+00:00", "kind": "homepage", "missing": false, "url": "https://lolbas-project.github.io"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:10:25.695675+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:10:25.695675+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:10:25.695675+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-29T17:25:14.030591+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6c589d93b6818ff2b01ac5a65bc947d3375acbf5a68878e2666003179f1cd18c", "fetched_at": "2026-08-28T04:10:25.695675+00:00", "kind": "readme", "missing": false, "url": "https://github.com/LOLBAS-Project/LOLBAS"}, {"content_hash": "1c5b1e78e5c91c3effaa472295a64cdce2cd9dbf788eeceae3ebebb137bdb69e", "fetched_at": "2026-08-29T08:25:25.411444+00:00", "kind": "homepage", "missing": false, "url": "https://lolbas-project.github.io"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:10:25.695675+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:10:25.695675+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-29T17:25:14.030591+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6c589d93b6818ff2b01ac5a65bc947d3375acbf5a68878e2666003179f1cd18c", "fetched_at": "2026-08-28T04:10:25.695675+00:00", "kind": "readme", "missing": false, "url": "https://github.com/LOLBAS-Project/LOLBAS"}, {"content_hash": "1c5b1e78e5c91c3effaa472295a64cdce2cd9dbf788eeceae3ebebb137bdb69e", "fetched_at": "2026-08-29T08:25:25.411444+00:00", "kind": "homepage", "missing": false, "url": "https://lolbas-project.github.io"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:10:25.695675+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:10:25.695675+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:10:25.695675+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-29T17:25:14.030591+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6c589d93b6818ff2b01ac5a65bc947d3375acbf5a68878e2666003179f1cd18c", "fetched_at": "2026-08-28T04:10:25.695675+00:00", "kind": "readme", "missing": false, "url": "https://github.com/LOLBAS-Project/LOLBAS"}, {"content_hash": "1c5b1e78e5c91c3effaa472295a64cdce2cd9dbf788eeceae3ebebb137bdb69e", "fetched_at": "2026-08-29T08:25:25.411444+00:00", "kind": "homepage", "missing": false, "url": "https://lolbas-project.github.io"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:10:25.695675+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:10:25.695675+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-29T17:25:14.030591+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6c589d93b6818ff2b01ac5a65bc947d3375acbf5a68878e2666003179f1cd18c", "fetched_at": "2026-08-28T04:10:25.695675+00:00", "kind": "readme", "missing": false, "url": "https://github.com/LOLBAS-Project/LOLBAS"}, {"content_hash": "1c5b1e78e5c91c3effaa472295a64cdce2cd9dbf788eeceae3ebebb137bdb69e", "fetched_at": "2026-08-29T08:25:25.411444+00:00", "kind": "homepage", "missing": false, "url": "https://lolbas-project.github.io"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-29T17:25:14.030591+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6c589d93b6818ff2b01ac5a65bc947d3375acbf5a68878e2666003179f1cd18c", "fetched_at": "2026-08-28T04:10:25.695675+00:00", "kind": "readme", "missing": false, "url": "https://github.com/LOLBAS-Project/LOLBAS"}, {"content_hash": "1c5b1e78e5c91c3effaa472295a64cdce2cd9dbf788eeceae3ebebb137bdb69e", "fetched_at": "2026-08-29T08:25:25.411444+00:00", "kind": "homepage", "missing": false, "url": "https://lolbas-project.github.io"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-29T17:25:14.030591+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6c589d93b6818ff2b01ac5a65bc947d3375acbf5a68878e2666003179f1cd18c", "fetched_at": "2026-08-28T04:10:25.695675+00:00", "kind": "readme", "missing": false, "url": "https://github.com/LOLBAS-Project/LOLBAS"}, {"content_hash": "1c5b1e78e5c91c3effaa472295a64cdce2cd9dbf788eeceae3ebebb137bdb69e", "fetched_at": "2026-08-29T08:25:25.411444+00:00", "kind": "homepage", "missing": false, "url": "https://lolbas-project.github.io"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-29T17:25:14.030591+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "6c589d93b6818ff2b01ac5a65bc947d3375acbf5a68878e2666003179f1cd18c", "fetched_at": "2026-08-28T04:10:25.695675+00:00", "kind": "readme", "missing": false, "url": "https://github.com/LOLBAS-Project/LOLBAS"}, {"content_hash": "1c5b1e78e5c91c3effaa472295a64cdce2cd9dbf788eeceae3ebebb137bdb69e", "fetched_at": "2026-08-29T08:25:25.411444+00:00", "kind": "homepage", "missing": false, "url": "https://lolbas-project.github.io"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 99, "longevity": 100, "rhythm": 35}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": ["no_releases"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 3008, "days_push": 7, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 77, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}