DÆMON

Authored command references for Windows, Active Directory, containers and cloud administration. Verification and prerequisites are recorded per entry.

Tools: 33
Techniques: 57
License: GPL-3.0

← Full catalog daemon-sec.xyz source

AppInstaller.exe1WIN attrib.exe1WIN auditpol.exe1WIN aws3NIXWINMAC az2NIXWINMAC BYOVD (vulnerable driver)1WIN Clear-EventLog6WIN crictl2NIX ctr1NIX curl.exe1WINNIXMAC desktopimgdownldr.exe1WIN devtunnel.exe1WINNIXMAC diskshadow.exe1WIN docker1NIX finger.exe1WIN fsutil.exe1WIN gcloud3NIXWINMAC kubectl13NIXWINMAC MpCmdRun.exe1WIN msedge.exe1WINMACNIX msiexec.exe1WIN nerdctl1NIX netsh.exe1WIN OneDriveStandaloneUpdater.exe1WIN reg.exe1WIN runc1NIX scp.exe1WINNIXMAC ssh.exe1WINNIXMAC tar.exe1WIN Teams.exe1WINMACNIX wevtutil.exe2WIN winget.exe1WIN wsl.exe1WINNIX

DΛΣMӨП//SΣCSECURITY / SYSTEMS

The Off-the-Land Almanac: GTFOBins, LOLBAS, WADComs and LOOBins, with DÆMON additions. Placeholder-only reference material for authorised testing, CTFs, detection engineering and education. Know your scope; get permission first.

01Catalog 02GTFOBins 03LOLBAS 04WADComs 05LOOBins 06Credits 07Main site ↗08Source ↗

All systems operational

GTFOBins · LOLBAS · WADComs · LOOBins · GPL-3.0

Rosé Pine · Astro · Pagefind

Search — DÆMONBinsEsc close · ⌘K toggle

Type to search the catalog. ↑↓ move, ↵ open, Esc close.