LOLBins

LOLBAS is a community-maintained catalog of Microsoft-signed Windows binaries, scripts, and libraries with unexpected functionality that can be abused for living-off-the-land tradecraft. Entries document behaviors such as code execution, file transfer, persistence, application-control bypass, credential access, memory dumping, surveillance, and log evasion or modification. It is an index rather than a single executable; syntax, platform support, prerequisites, and defensive visibility vary by entry and Windows version.