Living Off The Land Applications: Sowing the seeds for application exploitation ease.

Click on the logo to visit the Github repo.

This project was made because exploitation isn't limited to binaries using command line techniques. Both built-in and third-party applications have been used & abused for adversarial gain since the dawn of time, and knowing these methods can help when all else fail.

For contributions, use the contribution guide.

MITRE ATT&CK® and ATT&CK® are registered trademarks of The MITRE Corporation. You can see the current ATT&CK® mapping of this project on the ATT&CK® Navigator.

If you are looking for UNIX binaries, please visit
For Windows binaries, please visit

Application Functions Type ATT&CK® Techniques
Remote Desktop Connection Desktop
  • T1021.001
Microsoft Visual Studio Tools for Office (VSTO) Desktop
  • T1204.002
  • T1137.006
Windows Subsystem for Linux (WSL) Desktop
  • T1547.001
Discord Web
  • T1102
  • T1041
  • T1574.002
Dropbox Web
  • T1567.002
  • T1102
Zix Secure Messaging Web
  • T1567
  • T1105
  • T1566.003
No results.