Living Off The Land Script Collection

Living Off The Land Script Collection — 40+ Scripts

Scripts that operatesn exclusivamente with tools nativas of Windows:

n
• Reconnaissance (10) — Enumeration of red, users, shares, services using net.exe, nltest, dsquery, wmic.
n
• Execution (8) — Execution of payloads via mshta, rundll32, regsvr32, certutil, bitsadmin, msiexec.
n
• Persistence (8) — Scheduled tasks, registry run keys, WMI subscriptions, startup folder — all with tools nativas.
n
• Credential access (6) — Dump of credentials with comsvcs.dll, procdump (si disponible), registry SAM export.
n
• Exfilterstion (5) — Transferencia of data via certutil, bitsadmin, PowerShell WebClient, SMB, DNS TXT records.
n
• Defense evasion (5) — Disable logging, clear event logs, timestomp with PowerShell, alternate data streams.
n