LOLBAS icon indicating copy to clipboard operation
LOLBAS copied to clipboard

Pull request: Added Execute Tags to most of the LOLBas

Open hegusung opened this issue 4 months ago • 1 comments

Hi, I really like the Tags feature and wanted to add tags to see better what type of payload the LOLBas executes.

So I made a commit per LOLBas edited. If you want me to do just 1 big commit I will do another Pull Request

The following can be improved, please tell me if you want me to spend more time on this:

  • Every "execute" tag are under "Execute: TYPE". However some TYPE are not executed properly speaking (like INF file for exemple). We can just leave it like this or switch to :
    • Execute: TYPE for executed files (like EXE, DLL)
    • Input: TYPE for non executed files (like INF, SCT)
  • The current tagging system does not separate EXE payloads from EXE payloads where you can specify arguments. It might be interesting to separate those.

Anyway please tell me how you feel about this. Regards, Hegusung

hegusung avatar Oct 13 '24 21:10 hegusung