Living Off The Land Script Collection

Living Off The Land Script Collection — 40+ Scripts

Scripts que operan exclusivamente con herramientas nativas de Windows:

• Reconnaissance (10) — Enumeración de red, usuarios, shares, servicios usando net.exe, nltest, dsquery, wmic.
• Execution (8) — Ejecución de payloads via mshta, rundll32, regsvr32, certutil, bitsadmin, msiexec.
• Persistence (8) — Scheduled tasks, registry run keys, WMI subscriptions, startup folder — todo con herramientas nativas.
• Credential access (6) — Dump de credenciales con comsvcs.dll, procdump (si disponible), registry SAM export.
• Exfiltration (5) — Transferencia de datos via certutil, bitsadmin, PowerShell WebClient, SMB, DNS TXT records.
• Defense evasion (5) — Disable logging, clear event logs, timestomp con PowerShell, alternate data streams.