index.md

layout	page
title	LOLESXi

Living Off The Land ESXi

LOLESXi features a comprehensive list of binaries/scripts natively available in VMware ESXi that adversaries have utilised in their operations. The information on this site is compiled from open-source threat research.

This project is a collaborative project created by Janantha Marasinghe. Special thanks to Wietze Beukema for his contributions and the LOLBAS project for the theme. If you would like to contribute, check out our contribution guide. More information on programmatically accesssing this project can be found on the API page.

MITRE ATT&CK® and ATT&CK® are registered trademarks of The MITRE Corporation. You can see the current ATT&CK® mapping of this project on the <a href="https://mitre-attack.github.io/attack-navigator/#layerURL={{ '/mitre_attack_navigator_layer.json' | absolute_url | replace:"http://","https://" }}">ATT&CK® Navigator.

If you are looking for UNIX binaries, please visit gtfobins.github.io.
If you are looking for drivers, please visit loldrivers.io.
If you are looking for Windows Binaries, Scripts and Libraries please visit lolbas-project.github.io.

Useful Resources

• Mike L's ESXi IR Guide
• Albino Gazelle's ESXi Testing Toolkit

Icon Credit : Robot icons created by juicy_fish - Flaticon

{% include bin_table.html %}