Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.
Training Camp • Cybersecurity Glossary
LOLBins are legitimate signed system binaries (e.g., PowerShell, certutil) that attackers abuse to execute code and evade detection while blending in.
Living off the Land Binaries (LOLBins) Definition: LOLBins are legitimate signed system binaries (e.g., PowerShell, certutil) that attackers abuse to execute code and evade detection while blending in.
Living off the Land Binaries, or LOLBins, are legitimate, signed system tools and binaries that attackers abuse to carry out malicious actions while blending in with normal activity. Examples include PowerShell, certutil, mshta, rundll32, and wmic on Windows, which can download payloads, execute code, or move laterally without dropping obvious malware. Because these binaries are trusted and pre-installed, LOLBin techniques help adversaries evade allowlisting and signature-based detection.
Turn knowledge into credentials with our instructor-led cybersecurity boot camps.
View All Courses →