LOLESXi
Star

LOLESXi Logo

Living Off The Land ESXi

LOLESXi features a comprehensive list of binaries/scripts natively available in VMware ESXi that adversaries have utilised in their operations. The information on this site is compiled from open-source threat research.

This project is a collaborative project created by Janantha Marasinghe. Special thanks to Wietze Beukema for his contributions and the LOLBAS project for the theme. If you would like to contribute, check out our contribution guide. More information on programmatically accesssing this project can be found on the API page.

MITRE ATT&CK® and ATT&CK® are registered trademarks of The MITRE Corporation. You can see the current ATT&CK® mapping of this project on the ATT&CK® Navigator.

If you are looking for UNIX binaries, please visit gtfobins.github.io.
If you are looking for drivers, please visit loldrivers.io.
If you are looking for Windows Binaries, Scripts and Libraries please visit lolbas-project.github.io.

Icon Credit : Robot icons created by juicy_fish - Flaticon

Binary Type Functions Tags ATT&CK® Techniques
chmod Binaries
df Binaries
esxcfg-advcfg Binaries
esxcli Binaries
find Binaries
kill Binaries
mv Binaries
pkill Binaries
ssh Binaries
systemctl Binaries
touch Binaries
ulimit Binaries
vim-cmd Binaries
vm-support Binaries
vmkfstools Binaries
vpxa Binaries