{"id":477880,"date":"2023-08-09T09:22:01","date_gmt":"2023-08-09T09:22:01","guid":{"rendered":""},"modified":"2023-09-05T11:15:36","modified_gmt":"2023-09-05T11:15:36","slug":"lolbin","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/ar\/wiki\/lolbin\/","title":{"rendered":"LOLBin"},"content":{"rendered":"<p>LOLBin\u060c \u0648\u0647\u0648 \u0627\u062e\u062a\u0635\u0627\u0631 \u0644\u0639\u0628\u0627\u0631\u0629 &quot;Living Off the Land Binaries&quot;\u060c \u0647\u0648 \u0645\u0635\u0637\u0644\u062d \u064a\u0633\u062a\u062e\u062f\u0645 \u0641\u064a \u0645\u062c\u0627\u0644 \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a \u0644\u0644\u0625\u0634\u0627\u0631\u0629 \u0625\u0644\u0649 \u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0627\u0644\u062a\u0646\u0641\u064a\u0630\u064a\u0629 \u0623\u0648 \u0627\u0644\u0623\u062f\u0648\u0627\u062a \u0623\u0648 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0646\u0635\u064a\u0629 \u0627\u0644\u0645\u0634\u0631\u0648\u0639\u0629 \u0627\u0644\u0645\u0648\u062c\u0648\u062f\u0629 \u0639\u0644\u0649 \u0646\u0638\u0627\u0645 \u062a\u0634\u063a\u064a\u0644 Windows \u0648\u0627\u0644\u062a\u064a \u064a\u0645\u0643\u0646 \u0625\u0633\u0627\u0621\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647\u0627 \u0645\u0646 \u0642\u0628\u0644 \u062c\u0647\u0627\u062a \u0627\u0644\u062a\u0647\u062f\u064a\u062f \u0644\u062a\u0646\u0641\u064a\u0630 \u0623\u0646\u0634\u0637\u0629 \u0636\u0627\u0631\u0629. \u0647\u0630\u0647 \u0627\u0644\u062b\u0646\u0627\u0626\u064a\u0627\u062a \u0623\u0635\u0644\u064a\u0629 \u0641\u064a \u0627\u0644\u0646\u0638\u0627\u0645 \u0648\u0639\u0627\u062f\u0629\u064b \u0645\u0627 \u064a\u0633\u062a\u062e\u062f\u0645\u0647\u0627 \u0645\u062c\u0631\u0645\u0648 \u0627\u0644\u0625\u0646\u062a\u0631\u0646\u062a \u0644\u062a\u062c\u0627\u0648\u0632 \u0627\u0644\u0625\u062c\u0631\u0627\u0621\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0627\u0644\u062a\u0642\u0644\u064a\u062f\u064a\u0629. \u0648\u0645\u0646 \u062e\u0644\u0627\u0644 \u0627\u0644\u0627\u0633\u062a\u0641\u0627\u062f\u0629 \u0645\u0646 \u0647\u0630\u0647 \u0627\u0644\u062b\u0646\u0627\u0626\u064a\u0627\u062a \u0627\u0644\u0645\u062b\u0628\u062a\u0629 \u0645\u0633\u0628\u0642\u064b\u0627\u060c \u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u062a\u062c\u0646\u0628 \u0627\u0644\u0643\u0634\u0641 \u0648\u062c\u0639\u0644 \u0645\u0646 \u0627\u0644\u0635\u0639\u0628 \u0639\u0644\u0649 \u0623\u062f\u0648\u0627\u062a \u0627\u0644\u0623\u0645\u0627\u0646 \u0627\u0644\u062a\u0645\u064a\u064a\u0632 \u0628\u064a\u0646 \u0627\u0644\u0623\u0646\u0634\u0637\u0629 \u0627\u0644\u0645\u0634\u0631\u0648\u0639\u0629 \u0648\u0627\u0644\u062e\u0628\u064a\u062b\u0629.<\/p>\n<h2>\u062a\u0627\u0631\u064a\u062e \u0623\u0635\u0644 LOLBin \u0648\u0623\u0648\u0644 \u0630\u0643\u0631 \u0644\u0647<\/h2>\n<p>\u0627\u0643\u062a\u0633\u0628 \u0645\u0641\u0647\u0648\u0645 LOLBins \u0645\u0643\u0627\u0646\u0629 \u0628\u0627\u0631\u0632\u0629 \u0641\u064a \u0645\u062c\u062a\u0645\u0639 \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a \u0641\u064a \u0639\u0627\u0645 2014 \u062a\u0642\u0631\u064a\u0628\u064b\u0627 \u0639\u0646\u062f\u0645\u0627 \u0628\u062f\u0623 \u0627\u0644\u0628\u0627\u062d\u062b\u0648\u0646 \u0627\u0644\u0623\u0645\u0646\u064a\u0648\u0646 \u0641\u064a \u0645\u0644\u0627\u062d\u0638\u0629 \u0632\u064a\u0627\u062f\u0629 \u0641\u064a \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0648\u0627\u0644\u062a\u0642\u0646\u064a\u0627\u062a \u0627\u0644\u062e\u0627\u0644\u064a\u0629 \u0645\u0646 \u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0627\u0644\u062a\u064a \u062a\u0633\u062a\u062e\u062f\u0645 \u0623\u062f\u0648\u0627\u062a \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0645\u0633\u0627\u0639\u062f\u0629 \u0627\u0644\u0645\u0634\u0631\u0648\u0639\u0629 \u0644\u0623\u063a\u0631\u0627\u0636 \u0636\u0627\u0631\u0629. \u0643\u0627\u0646 \u0623\u0648\u0644 \u0630\u0643\u0631 \u0644\u0640 LOLBins \u0641\u064a \u0648\u0631\u0642\u0629 \u0628\u062d\u062b\u064a\u0629 \u0628\u0639\u0646\u0648\u0627\u0646 &quot;\u0627\u0644\u0639\u064a\u0634 \u062e\u0627\u0631\u062c \u0627\u0644\u0623\u0631\u0636 \u0648\u0627\u0644\u062a\u0647\u0631\u0628 \u0645\u0646 \u0627\u0644\u0643\u0634\u0641 - \u062f\u0631\u0627\u0633\u0629 \u0627\u0633\u062a\u0642\u0635\u0627\u0626\u064a\u0629 \u0644\u0644\u0645\u0645\u0627\u0631\u0633\u0627\u062a \u0627\u0644\u0634\u0627\u0626\u0639\u0629&quot; \u0628\u0642\u0644\u0645 \u0643\u064a\u0633\u064a \u0633\u0645\u064a\u062b \u0641\u064a \u0639\u0627\u0645 2014. \u0648\u0633\u0644\u0637\u062a \u0647\u0630\u0647 \u0627\u0644\u0648\u0631\u0642\u0629 \u0627\u0644\u0636\u0648\u0621 \u0639\u0644\u0649 \u0643\u064a\u0641\u064a\u0629 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0627\u0644\u062e\u0635\u0648\u0645 \u0644\u062b\u0646\u0627\u0626\u064a\u0627\u062a Windows \u0627\u0644\u0645\u062f\u0645\u062c\u0629 \u0644\u0625\u062e\u0641\u0627\u0621 \u0623\u0646\u0634\u0637\u062a\u0647\u0645 \u0648 \u0627\u0644\u062a\u0647\u0631\u0628 \u0645\u0646 \u0627\u0644\u0643\u0634\u0641.<\/p>\n<h2>\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u062a\u0641\u0635\u064a\u0644\u064a\u0629 \u062d\u0648\u0644 LOLBin: \u062a\u0648\u0633\u064a\u0639 \u0627\u0644\u0645\u0648\u0636\u0648\u0639 LOLBin<\/h2>\n<p>\u062a\u0645\u062b\u0644 LOLBins \u0627\u0633\u062a\u0631\u0627\u062a\u064a\u062c\u064a\u0629 \u0630\u0643\u064a\u0629 \u064a\u0633\u062a\u062e\u062f\u0645\u0647\u0627 \u0627\u0644\u062e\u0635\u0648\u0645 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a\u0648\u0646 \u0644\u0644\u062a\u062d\u0644\u064a\u0642 \u062a\u062d\u062a \u0627\u0644\u0631\u0627\u062f\u0627\u0631. \u062a\u0648\u0641\u0631 \u0647\u0630\u0647 \u0627\u0644\u062b\u0646\u0627\u0626\u064a\u0627\u062a \u0627\u0644\u0645\u062b\u0628\u062a\u0629 \u0645\u0633\u0628\u0642\u064b\u0627 \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u062a\u0631\u0633\u0627\u0646\u0629 \u0648\u0627\u0633\u0639\u0629 \u0644\u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 \u0645\u062e\u062a\u0644\u0641\u0629\u060c \u0648\u0627\u0644\u062a\u0641\u0627\u0639\u0644 \u0645\u0639 \u0627\u0644\u0646\u0638\u0627\u0645\u060c \u0648\u0625\u062c\u0631\u0627\u0621 \u0627\u0644\u0627\u0633\u062a\u0637\u0644\u0627\u0639 \u062f\u0648\u0646 \u0627\u0644\u062d\u0627\u062c\u0629 \u0625\u0644\u0649 \u0625\u0633\u0642\u0627\u0637 \u0645\u0644\u0641\u0627\u062a \u0636\u0627\u0631\u0629 \u0625\u0636\u0627\u0641\u064a\u0629 \u0639\u0644\u0649 \u062c\u0647\u0627\u0632 \u0627\u0644\u0636\u062d\u064a\u0629. \u064a\u062a\u0645 \u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647\u0627 \u0628\u0634\u0643\u0644 \u0634\u0627\u0626\u0639 \u0641\u064a \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u062a\u064a \u0644\u0627 \u062a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0645\u0644\u0641\u0627\u062a\u060c \u062d\u064a\u062b \u064a\u062d\u062f\u062b \u0627\u0644\u0647\u062c\u0648\u0645 \u0641\u064a \u0627\u0644\u0630\u0627\u0643\u0631\u0629 \u0641\u0642\u0637\u060c \u0648\u0644\u0627 \u064a\u062a\u0631\u0643 \u0623\u064a \u0623\u062b\u0631 \u064a\u0630\u0643\u0631 \u0639\u0644\u0649 \u0627\u0644\u0642\u0631\u0635 \u0627\u0644\u0635\u0644\u0628.<\/p>\n<p>\u063a\u0627\u0644\u0628\u064b\u0627 \u0645\u0627 \u064a\u062a\u0645 \u062f\u0645\u062c \u0627\u0633\u062a\u062e\u062f\u0627\u0645 LOLBins \u0645\u0639 \u062a\u0642\u0646\u064a\u0627\u062a \u0623\u062e\u0631\u0649\u060c \u0645\u062b\u0644 \u062a\u0643\u062a\u064a\u0643\u0627\u062a \u0627\u0644\u0639\u064a\u0634 \u062e\u0627\u0631\u062c \u0627\u0644\u0623\u0631\u0636\u060c \u0648\u0627\u0644\u0628\u0631\u0645\u062c\u0629 \u0627\u0644\u0646\u0635\u064a\u0629 PowerShell\u060c \u0648WMI (\u0623\u062f\u0648\u0627\u062a \u0625\u062f\u0627\u0631\u0629 Windows) \u0644\u0632\u064a\u0627\u062f\u0629 \u0641\u0639\u0627\u0644\u064a\u062a\u0647\u0627 \u0625\u0644\u0649 \u0623\u0642\u0635\u0649 \u062d\u062f. \u062a\u0639\u062a\u0628\u0631 LOLBins \u0641\u0639\u0627\u0644\u0629 \u0628\u0634\u0643\u0644 \u062e\u0627\u0635 \u0641\u064a \u0633\u064a\u0646\u0627\u0631\u064a\u0648\u0647\u0627\u062a \u0645\u0627 \u0628\u0639\u062f \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644\u060c \u0644\u0623\u0646\u0647\u0627 \u062a\u0645\u0643\u0646 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0645\u0646 \u0627\u0644\u0627\u0646\u062f\u0645\u0627\u062c \u0645\u0639 \u0646\u0634\u0627\u0637 \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0645\u0634\u0631\u0648\u0639\u060c \u0645\u0645\u0627 \u064a\u062c\u0639\u0644 \u0645\u0646 \u0627\u0644\u0635\u0639\u0628 \u0639\u0644\u0649 \u0645\u062d\u0644\u0644\u064a \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u062a\u0645\u064a\u064a\u0632 \u0628\u064a\u0646 \u0627\u0644\u0633\u0644\u0648\u0643 \u0627\u0644\u0639\u0627\u062f\u064a \u0648\u0627\u0644\u0633\u0644\u0648\u0643 \u0627\u0644\u0636\u0627\u0631.<\/p>\n<h2>\u0627\u0644\u0647\u064a\u0643\u0644 \u0627\u0644\u062f\u0627\u062e\u0644\u064a \u0644\u0640 LOLBin: \u0643\u064a\u0641 \u064a\u0639\u0645\u0644 LOLBin<\/h2>\n<p>LOLBins \u0639\u0628\u0627\u0631\u0629 \u0639\u0646 \u062b\u0646\u0627\u0626\u064a\u0627\u062a Windows \u0623\u0635\u0644\u064a\u0629 \u064a\u062a\u0645 \u062a\u062b\u0628\u064a\u062a\u0647\u0627 \u0645\u0633\u0628\u0642\u064b\u0627 \u0639\u0644\u0649 \u0646\u0638\u0627\u0645 \u0627\u0644\u062a\u0634\u063a\u064a\u0644. \u0644\u062f\u064a\u0647\u0645 \u0648\u0638\u0627\u0626\u0641 \u0634\u0631\u0639\u064a\u0629 \u0648\u062a\u0645 \u062a\u0635\u0645\u064a\u0645\u0647\u0645 \u0644\u0644\u0645\u0633\u0627\u0639\u062f\u0629 \u0641\u064a \u0645\u062e\u062a\u0644\u0641 \u0627\u0644\u0645\u0647\u0627\u0645 \u0627\u0644\u0625\u062f\u0627\u0631\u064a\u0629 \u0648\u0635\u064a\u0627\u0646\u0629 \u0627\u0644\u0646\u0638\u0627\u0645 \u0648\u0627\u0633\u062a\u0643\u0634\u0627\u0641 \u0627\u0644\u0623\u062e\u0637\u0627\u0621 \u0648\u0625\u0635\u0644\u0627\u062d\u0647\u0627. \u064a\u062a\u0644\u0627\u0639\u0628 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u0648\u0646 \u0628\u0647\u0630\u0647 \u0627\u0644\u062b\u0646\u0627\u0626\u064a\u0627\u062a \u0644\u062a\u062d\u0642\u064a\u0642 \u0623\u0647\u062f\u0627\u0641 \u062e\u0628\u064a\u062b\u0629 \u062f\u0648\u0646 \u0625\u062b\u0627\u0631\u0629 \u0627\u0644\u0634\u0643\u0648\u0643. \u0627\u0644\u0628\u0646\u064a\u0629 \u0627\u0644\u062f\u0627\u062e\u0644\u064a\u0629 \u0644\u0640 LOLBin \u0647\u064a \u0646\u0641\u0633 \u0627\u0644\u0628\u0646\u064a\u0629 \u0644\u0623\u064a \u0646\u0638\u0627\u0645 \u062b\u0646\u0627\u0626\u064a \u0639\u0627\u062f\u064a\u060c \u0645\u0645\u0627 \u064a\u0633\u0645\u062d \u0644\u0647\u0627 \u0628\u0627\u0644\u0639\u0645\u0644 \u062f\u0648\u0646 \u0623\u0646 \u062a\u0644\u0627\u062d\u0638\u0647\u0627 \u0627\u0644\u062d\u0644\u0648\u0644 \u0627\u0644\u0623\u0645\u0646\u064a\u0629.<\/p>\n<p>\u062a\u062a\u0636\u0645\u0646 \u0627\u0644\u0639\u0645\u0644\u064a\u0629 \u0639\u0627\u062f\u0629\u064b \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0648\u0633\u064a\u0637\u0627\u062a \u0633\u0637\u0631 \u0627\u0644\u0623\u0648\u0627\u0645\u0631 \u0644\u0627\u0633\u062a\u062f\u0639\u0627\u0621 \u0648\u0638\u0627\u0626\u0641 \u0645\u062d\u062f\u062f\u0629 \u0623\u0648 \u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 PowerShell \u0623\u0648 \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0645\u0648\u0627\u0631\u062f \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u062d\u0633\u0627\u0633\u0629. \u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 LOLBins \u0644\u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629\u060c \u0648\u0625\u0646\u0634\u0627\u0621 \u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0623\u0648 \u062a\u0639\u062f\u064a\u0644\u0647\u0627\u060c \u0648\u0627\u0644\u0627\u0633\u062a\u0639\u0644\u0627\u0645 \u0639\u0646 \u0633\u062c\u0644 \u0627\u0644\u0646\u0638\u0627\u0645\u060c \u0648\u0627\u0644\u062a\u0648\u0627\u0635\u0644 \u0639\u0628\u0631 \u0627\u0644\u0634\u0628\u0643\u0629\u060c \u0648\u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u0623\u0646\u0634\u0637\u0629 \u0627\u0644\u0623\u062e\u0631\u0649 \u0627\u0644\u0644\u0627\u0632\u0645\u0629 \u0644\u062a\u062d\u0642\u064a\u0642 \u0623\u0647\u062f\u0627\u0641\u0647\u0645.<\/p>\n<h2>\u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u0633\u0645\u0627\u062a \u0627\u0644\u0631\u0626\u064a\u0633\u064a\u0629 \u0644LOLBin<\/h2>\n<p>\u062a\u0642\u062f\u0645 LOLBins \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0627\u0644\u0645\u064a\u0632\u0627\u062a \u0627\u0644\u0631\u0626\u064a\u0633\u064a\u0629 \u0627\u0644\u062a\u064a \u062a\u062c\u0639\u0644\u0647\u0627 \u062c\u0630\u0627\u0628\u0629 \u0644\u0645\u0645\u062b\u0644\u064a \u0627\u0644\u062a\u0647\u062f\u064a\u062f:<\/p>\n<ol>\n<li>\n<p><strong>\u0627\u0644\u0645\u0638\u0647\u0631 \u0627\u0644\u0634\u0631\u0639\u064a<\/strong>: \u062a\u062d\u062a\u0648\u064a LOLBins \u0639\u0644\u0649 \u062a\u0648\u0642\u064a\u0639\u0627\u062a \u0631\u0642\u0645\u064a\u0629 \u0635\u0627\u0644\u062d\u0629 \u0648\u064a\u062a\u0645 \u062a\u0648\u0642\u064a\u0639\u0647\u0627 \u0639\u0627\u062f\u0629\u064b \u0628\u0648\u0627\u0633\u0637\u0629 Microsoft\u060c \u0645\u0645\u0627 \u064a\u062c\u0639\u0644\u0647\u0627 \u062a\u0628\u062f\u0648 \u062c\u062f\u064a\u0631\u0629 \u0628\u0627\u0644\u062b\u0642\u0629 \u0648\u062a\u062a\u062c\u0627\u0648\u0632 \u0639\u0645\u0644\u064a\u0627\u062a \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0627\u0644\u0623\u0645\u0627\u0646.<\/p>\n<\/li>\n<li>\n<p><strong>\u0627\u0644\u062e\u0641\u0627\u0621<\/strong>: \u0646\u0638\u0631\u064b\u0627 \u0644\u0623\u0646\u0647\u0627 \u062b\u0646\u0627\u0626\u064a\u0627\u062a \u0623\u0635\u0644\u064a\u0629 \u0644\u0644\u0646\u0638\u0627\u0645\u060c \u064a\u0645\u0643\u0646 \u0644\u0640 LOLBins \u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0636\u0627\u0631\u0629 \u062f\u0648\u0646 \u0631\u0641\u0639 \u0625\u0634\u0627\u0631\u0627\u062a \u062d\u0645\u0631\u0627\u0621 \u0623\u0648 \u0625\u0637\u0644\u0627\u0642 \u062a\u0646\u0628\u064a\u0647\u0627\u062a \u0645\u0646 \u0627\u0644\u062d\u0644\u0648\u0644 \u0627\u0644\u0623\u0645\u0646\u064a\u0629.<\/p>\n<\/li>\n<li>\n<p><strong>\u0644\u0627 \u062d\u0627\u062c\u0629 \u0644\u0625\u0633\u0642\u0627\u0637 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631\u0629<\/strong>: \u0644\u0627 \u062a\u062a\u0637\u0644\u0628 LOLBins \u0645\u0646 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0625\u0633\u0642\u0627\u0637 \u0645\u0644\u0641\u0627\u062a \u0625\u0636\u0627\u0641\u064a\u0629 \u0639\u0644\u0649 \u0646\u0638\u0627\u0645 \u0627\u0644\u0636\u062d\u064a\u0629\u060c \u0645\u0645\u0627 \u064a\u0642\u0644\u0644 \u0645\u0646 \u0641\u0631\u0635 \u0627\u0643\u062a\u0634\u0627\u0641\u0647\u0627.<\/p>\n<\/li>\n<li>\n<p><strong>\u0625\u0633\u0627\u0621\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u0644\u0623\u062f\u0648\u0627\u062a \u0627\u0644\u0645\u0648\u062b\u0648\u0642\u0629<\/strong>: \u064a\u0633\u062a\u0641\u064a\u062f \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u0648\u0646 \u0645\u0646 \u0627\u0644\u0623\u062f\u0648\u0627\u062a \u0627\u0644\u0645\u062f\u0631\u062c\u0629 \u0628\u0627\u0644\u0641\u0639\u0644 \u0641\u064a \u0627\u0644\u0642\u0627\u0626\u0645\u0629 \u0627\u0644\u0628\u064a\u0636\u0627\u0621 \u0648\u0627\u0644\u062a\u064a \u062a\u0639\u062a\u0628\u0631 \u0622\u0645\u0646\u0629\u060c \u0645\u0645\u0627 \u064a\u062c\u0639\u0644 \u0645\u0646 \u0627\u0644\u0635\u0639\u0628 \u0639\u0644\u0649 \u0623\u062f\u0648\u0627\u062a \u0627\u0644\u0623\u0645\u0627\u0646 \u0627\u0644\u062a\u0645\u064a\u064a\u0632 \u0628\u064a\u0646 \u0627\u0644\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u0644\u0645\u0634\u0631\u0648\u0639 \u0648\u0627\u0644\u0636\u0627\u0631.<\/p>\n<\/li>\n<li>\n<p><strong>\u062a\u0646\u0641\u064a\u0630 \u0628\u062f\u0648\u0646 \u0645\u0644\u0641<\/strong>: \u062a\u0639\u0645\u0644 LOLBins \u0639\u0644\u0649 \u062a\u0645\u0643\u064a\u0646 \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0628\u062f\u0648\u0646 \u0645\u0644\u0641\u0627\u062a\u060c \u0645\u0645\u0627 \u064a\u0642\u0644\u0644 \u0645\u0646 \u0627\u0644\u0628\u0635\u0645\u0629 \u0627\u0644\u0631\u0642\u0645\u064a\u0629 \u0648\u064a\u0632\u064a\u062f \u0645\u0646 \u062a\u0639\u0642\u064a\u062f \u0627\u0644\u062a\u062d\u0642\u064a\u0642\u0627\u062a \u0627\u0644\u062c\u0646\u0627\u0626\u064a\u0629.<\/p>\n<\/li>\n<\/ol>\n<h2>\u0623\u0646\u0648\u0627\u0639 LOLBin<\/h2>\n<table>\n<thead>\n<tr>\n<th>\u0646\u0648\u0639 \u0644\u0648\u0644\u0628\u064a\u0646<\/th>\n<th>\u0648\u0635\u0641<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0646\u0635\u064a\u0629 \u0628\u0648\u0648\u064a\u0631\u0634\u064a\u0644<\/td>\n<td>\u064a\u0633\u062a\u062e\u062f\u0645 PowerShell\u060c \u0648\u0647\u064a \u0644\u063a\u0629 \u0628\u0631\u0645\u062c\u0629 \u0646\u0635\u064a\u0629 \u0642\u0648\u064a\u0629 \u0641\u064a Windows\u060c \u0644\u062a\u0646\u0641\u064a\u0630 \u0623\u0646\u0634\u0637\u0629 \u0636\u0627\u0631\u0629.<\/td>\n<\/tr>\n<tr>\n<td>\u0623\u062f\u0648\u0627\u062a \u0625\u062f\u0627\u0631\u0629 Windows (WMI)<\/td>\n<td>\u064a\u0633\u062a\u063a\u0644 WMI \u0644\u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0646\u0635\u064a\u0629 \u0648\u0627\u0644\u0623\u0648\u0627\u0645\u0631 \u0639\u0646 \u0628\u0639\u062f \u0639\u0644\u0649 \u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641\u0629.<\/td>\n<\/tr>\n<tr>\n<td>\u0645\u0648\u062c\u0647 \u0623\u0648\u0627\u0645\u0631 Windows (cmd.exe)<\/td>\n<td>\u0627\u0644\u0627\u0633\u062a\u0641\u0627\u062f\u0629 \u0645\u0646 \u0645\u062a\u0631\u062c\u0645 \u0633\u0637\u0631 \u0623\u0648\u0627\u0645\u0631 Windows \u0627\u0644\u0623\u0635\u0644\u064a \u0644\u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u0623\u0648\u0627\u0645\u0631 \u0648\u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0646\u0635\u064a\u0629.<\/td>\n<\/tr>\n<tr>\n<td>Windows Script Host (wscript.exe\u060c cscript.exe)<\/td>\n<td>\u064a\u0646\u0641\u0630 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0646\u0635\u064a\u0629 \u0627\u0644\u0645\u0643\u062a\u0648\u0628\u0629 \u0641\u064a VBScript \u0623\u0648 JScript.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u0637\u0631\u0642 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 LOLBin \u0648\u0627\u0644\u0645\u0634\u0627\u0643\u0644 \u0648\u062d\u0644\u0648\u0644\u0647\u0627 \u0627\u0644\u0645\u062a\u0639\u0644\u0642\u0629 \u0628\u0627\u0644\u0627\u0633\u062a\u062e\u062f\u0627\u0645<\/h2>\n<h3>\u0637\u0631\u0642 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 LOLBin<\/h3>\n<ol>\n<li>\n<p><strong>\u0627\u0644\u062a\u0635\u0639\u064a\u062f \u0627\u0645\u062a\u064a\u0627\u0632<\/strong>: \u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 LOLBins \u0644\u0631\u0641\u0639 \u0627\u0644\u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a \u0639\u0644\u0649 \u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0645\u062e\u062a\u0631\u0642\u0629\u060c \u0648\u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0648\u0627\u0644\u0645\u0648\u0627\u0631\u062f \u0627\u0644\u062d\u0633\u0627\u0633\u0629.<\/p>\n<\/li>\n<li>\n<p><strong>\u062c\u0645\u0639 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a<\/strong>: \u062a\u0633\u062a\u062e\u062f\u0645 \u062c\u0647\u0627\u062a \u0627\u0644\u062a\u0647\u062f\u064a\u062f LOLBins \u0644\u062c\u0645\u0639 \u0645\u0639\u0644\u0648\u0645\u0627\u062a \u062d\u0648\u0644 \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641\u060c \u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0645\u062b\u0628\u062a\u0629 \u0648\u062a\u0643\u0648\u064a\u0646 \u0627\u0644\u0634\u0628\u0643\u0629 \u0648\u062d\u0633\u0627\u0628\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646.<\/p>\n<\/li>\n<li>\n<p><strong>\u0627\u0644\u062d\u0631\u0643\u0629 \u0627\u0644\u062c\u0627\u0646\u0628\u064a\u0629<\/strong>: \u064a\u0633\u062a\u062e\u062f\u0645 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u0648\u0646 LOLBins \u0644\u0644\u062a\u062d\u0631\u0643 \u0623\u0641\u0642\u064a\u064b\u0627 \u062f\u0627\u062e\u0644 \u0627\u0644\u0634\u0628\u0643\u0629\u060c \u0648\u0627\u0644\u0642\u0641\u0632 \u0645\u0646 \u0646\u0638\u0627\u0645 \u0625\u0644\u0649 \u0622\u062e\u0631\u060c \u0643\u0644 \u0630\u0644\u0643 \u0645\u0639 \u0627\u0644\u062d\u0641\u0627\u0638 \u0639\u0644\u0649 \u0627\u0644\u062a\u062e\u0641\u064a.<\/p>\n<\/li>\n<li>\n<p><strong>\u0625\u0635\u0631\u0627\u0631<\/strong>: \u062a\u0645\u0643\u0646 LOLBins \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0645\u0646 \u0625\u062b\u0628\u0627\u062a \u0627\u0633\u062a\u0645\u0631\u0627\u0631\u064a\u0629 \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0645\u062e\u062a\u0631\u0642\u060c \u0645\u0645\u0627 \u064a\u0636\u0645\u0646 \u0642\u062f\u0631\u062a\u0647\u0645 \u0639\u0644\u0649 \u0627\u0644\u062d\u0641\u0627\u0638 \u0639\u0644\u0649 \u0627\u0644\u0648\u0635\u0648\u0644 \u0639\u0644\u0649 \u0645\u062f\u0649 \u0641\u062a\u0631\u0629 \u0637\u0648\u064a\u0644\u0629.<\/p>\n<\/li>\n<\/ol>\n<h3>\u0627\u0644\u0645\u0634\u0627\u0643\u0644 \u0648\u062d\u0644\u0648\u0644\u0647\u0627 \u0627\u0644\u0645\u062a\u0639\u0644\u0642\u0629 \u0628\u0627\u0644\u0627\u0633\u062a\u062e\u062f\u0627\u0645<\/h3>\n<p>\u064a\u0634\u0643\u0644 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 LOLBins \u062a\u062d\u062f\u064a\u0627\u062a \u0643\u0628\u064a\u0631\u0629 \u0644\u0645\u062d\u062a\u0631\u0641\u064a \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a. \u0628\u0639\u0636 \u0627\u0644\u0645\u0634\u0627\u0643\u0644 \u062a\u0634\u0645\u0644:<\/p>\n<ol>\n<li>\n<p><strong>\u0643\u0634\u0641<\/strong>: \u0642\u062f \u062a\u0648\u0627\u062c\u0647 \u0623\u062f\u0648\u0627\u062a \u0627\u0644\u0623\u0645\u0627\u0646 \u0627\u0644\u062a\u0642\u0644\u064a\u062f\u064a\u0629 \u0627\u0644\u0642\u0627\u0626\u0645\u0629 \u0639\u0644\u0649 \u0627\u0644\u062a\u0648\u0642\u064a\u0639 \u0635\u0639\u0648\u0628\u0627\u062a \u0641\u064a \u0627\u0643\u062a\u0634\u0627\u0641 LOLBins \u0646\u0638\u0631\u064b\u0627 \u0644\u0637\u0628\u064a\u0639\u062a\u0647\u0627 \u0627\u0644\u0645\u0634\u0631\u0648\u0639\u0629 \u0648\u0639\u062f\u0645 \u0648\u062c\u0648\u062f \u0623\u0646\u0645\u0627\u0637 \u0645\u0639\u0631\u0648\u0641\u0629 \u0645\u0646 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631\u0629.<\/p>\n<\/li>\n<li>\n<p><strong>\u0627\u0644\u0631\u0624\u064a\u0629<\/strong>: \u0646\u0638\u0631\u064b\u0627 \u0644\u0623\u0646 LOLBins \u062a\u0639\u0645\u0644 \u0636\u0645\u0646 \u0639\u0645\u0644\u064a\u0627\u062a \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0645\u0634\u0631\u0648\u0639\u0629\u060c \u0641\u0625\u0646\u0647\u0627 \u063a\u0627\u0644\u0628\u064b\u0627 \u0645\u0627 \u062a\u062a\u062c\u0646\u0628 \u0627\u0644\u0643\u0634\u0641 \u0627\u0644\u0642\u0627\u0626\u0645 \u0639\u0644\u0649 \u0627\u0644\u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u0633\u0644\u0648\u0643\u064a.<\/p>\n<\/li>\n<li>\n<p><strong>\u0627\u0644\u0642\u0627\u0626\u0645\u0629 \u0627\u0644\u0628\u064a\u0636\u0627\u0621<\/strong>: \u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0625\u0633\u0627\u0621\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0622\u0644\u064a\u0627\u062a \u0627\u0644\u0642\u0627\u0626\u0645\u0629 \u0627\u0644\u0628\u064a\u0636\u0627\u0621 \u0627\u0644\u062a\u064a \u062a\u0633\u0645\u062d \u0628\u062a\u0634\u063a\u064a\u0644 \u0627\u0644\u062b\u0646\u0627\u0626\u064a\u0627\u062a \u0627\u0644\u0645\u0639\u0631\u0648\u0641\u0629 \u062f\u0648\u0646 \u0642\u064a\u0648\u062f.<\/p>\n<\/li>\n<li>\n<p><strong>\u062a\u062e\u0641\u064a\u0641<\/strong>: \u0644\u0627 \u064a\u0639\u062f \u062a\u0639\u0637\u064a\u0644 LOLBins \u0623\u0648 \u062d\u0638\u0631\u0647 \u0628\u0627\u0644\u0643\u0627\u0645\u0644 \u0623\u0645\u0631\u064b\u0627 \u0645\u0645\u0643\u0646\u064b\u0627 \u0646\u0638\u0631\u064b\u0627 \u0644\u0623\u0646\u0647 \u064a\u062e\u062f\u0645 \u0648\u0638\u0627\u0626\u0641 \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0623\u0633\u0627\u0633\u064a\u0629.<\/p>\n<\/li>\n<\/ol>\n<p>\u0648\u0644\u0645\u0648\u0627\u062c\u0647\u0629 \u0647\u0630\u0647 \u0627\u0644\u062a\u062d\u062f\u064a\u0627\u062a\u060c \u062a\u062d\u062a\u0627\u062c \u0627\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u0625\u0644\u0649 \u0627\u0639\u062a\u0645\u0627\u062f \u0646\u0647\u062c \u0623\u0645\u0646\u064a \u0645\u062a\u0639\u062f\u062f \u0627\u0644\u0637\u0628\u0642\u0627\u062a \u064a\u062a\u0636\u0645\u0646:<\/p>\n<ul>\n<li><strong>\u0627\u0644\u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u0633\u0644\u0648\u0643\u064a<\/strong>: \u062a\u0648\u0638\u064a\u0641 \u0623\u0633\u0627\u0644\u064a\u0628 \u0627\u0644\u0643\u0634\u0641 \u0627\u0644\u0642\u0627\u0626\u0645\u0629 \u0639\u0644\u0649 \u0627\u0644\u0633\u0644\u0648\u0643 \u0644\u062a\u062d\u062f\u064a\u062f \u0627\u0644\u0623\u0646\u0634\u0637\u0629 \u063a\u064a\u0631 \u0627\u0644\u0637\u0628\u064a\u0639\u064a\u0629\u060c \u062d\u062a\u0649 \u0636\u0645\u0646 \u0627\u0644\u062b\u0646\u0627\u0626\u064a\u0627\u062a \u0627\u0644\u0645\u0634\u0631\u0648\u0639\u0629.<\/li>\n<li><strong>\u0625\u0643\u062a\u0634\u0627\u0641 \u0639\u064a\u0628 \u062e\u0644\u0642\u064a<\/strong>: \u0627\u0644\u0627\u0633\u062a\u0641\u0627\u062f\u0629 \u0645\u0646 \u0627\u0644\u0643\u0634\u0641 \u0639\u0646 \u0627\u0644\u062d\u0627\u0644\u0627\u062a \u0627\u0644\u0634\u0627\u0630\u0629 \u0644\u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u0627\u0646\u062d\u0631\u0627\u0641\u0627\u062a \u0639\u0646 \u0633\u0644\u0648\u0643 \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0639\u0627\u062f\u064a.<\/li>\n<li><strong>\u062d\u0645\u0627\u064a\u0629 \u0646\u0642\u0637\u0629 \u0627\u0644\u0646\u0647\u0627\u064a\u0629<\/strong>: \u0627\u0633\u062a\u062b\u0645\u0631 \u0641\u064a \u0623\u062f\u0648\u0627\u062a \u062d\u0645\u0627\u064a\u0629 \u0646\u0642\u0637\u0629 \u0627\u0644\u0646\u0647\u0627\u064a\u0629 \u0627\u0644\u0645\u062a\u0642\u062f\u0645\u0629 \u0627\u0644\u062a\u064a \u064a\u0645\u0643\u0646\u0647\u0627 \u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u062e\u0627\u0644\u064a\u0629 \u0645\u0646 \u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0648\u0639\u0645\u0644\u064a\u0627\u062a \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0627\u0644\u0630\u0627\u0643\u0631\u0629.<\/li>\n<li><strong>\u062a\u0639\u0644\u064a\u0645 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645<\/strong>: \u0642\u0645 \u0628\u062a\u062b\u0642\u064a\u0641 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646 \u062d\u0648\u0644 \u0645\u062e\u0627\u0637\u0631 \u0627\u0644\u062a\u0635\u064a\u062f \u0627\u0644\u0627\u062d\u062a\u064a\u0627\u0644\u064a \u0648\u0627\u0644\u0647\u0646\u062f\u0633\u0629 \u0627\u0644\u0627\u062c\u062a\u0645\u0627\u0639\u064a\u0629\u060c \u0648\u0627\u0644\u062a\u064a \u062a\u0639\u062f \u0645\u0646 \u0627\u0644\u0639\u0648\u0627\u0645\u0644 \u0627\u0644\u0634\u0627\u0626\u0639\u0629 \u0644\u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u0646\u062f\u0629 \u0625\u0644\u0649 LOLBin.<\/li>\n<\/ul>\n<h2>\u0627\u0644\u062e\u0635\u0627\u0626\u0635 \u0627\u0644\u0631\u0626\u064a\u0633\u064a\u0629 \u0648\u0645\u0642\u0627\u0631\u0646\u0627\u062a \u0623\u062e\u0631\u0649 \u0645\u0639 \u0645\u0635\u0637\u0644\u062d\u0627\u062a \u0645\u0645\u0627\u062b\u0644\u0629<\/h2>\n<table>\n<thead>\n<tr>\n<th>\u0634\u0631\u0637<\/th>\n<th>\u0648\u0635\u0641<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>LOLBins<\/td>\n<td>\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062b\u0646\u0627\u0626\u064a\u0627\u062a \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0645\u0634\u0631\u0648\u0639\u0629 \u0644\u0623\u063a\u0631\u0627\u0636 \u0636\u0627\u0631\u0629.<\/td>\n<\/tr>\n<tr>\n<td>\u0647\u062c\u0645\u0627\u062a \u0628\u062f\u0648\u0646 \u0645\u0644\u0641\u0627\u062a<\/td>\n<td>\u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u062a\u064a \u0644\u0627 \u062a\u0639\u062a\u0645\u062f \u0639\u0644\u0649 \u0625\u0633\u0642\u0627\u0637 \u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0639\u0644\u0649 \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641\u060c \u062a\u0639\u0645\u0644 \u0641\u0642\u0637 \u0641\u064a \u0627\u0644\u0630\u0627\u0643\u0631\u0629.<\/td>\n<\/tr>\n<tr>\n<td>\u0625\u0645\u0628\u0631\u0627\u0637\u0648\u0631\u064a\u0629 \u0628\u0648\u0648\u064a\u0631\u0634\u064a\u0644<\/td>\n<td>\u0625\u0637\u0627\u0631 \u0639\u0645\u0644 \u0645\u0627 \u0628\u0639\u062f \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u064a\u0633\u062a\u062e\u062f\u0645 PowerShell \u0644\u0644\u0639\u0645\u0644\u064a\u0627\u062a \u0627\u0644\u0647\u062c\u0648\u0645\u064a\u0629.<\/td>\n<\/tr>\n<tr>\n<td>\u0627\u0644\u0639\u064a\u0634 \u062e\u0627\u0631\u062c \u062a\u0643\u062a\u064a\u0643\u0627\u062a \u0627\u0644\u0623\u0631\u0636<\/td>\n<td>\u0627\u0644\u0627\u0633\u062a\u0641\u0627\u062f\u0629 \u0645\u0646 \u0627\u0644\u0623\u062f\u0648\u0627\u062a \u0627\u0644\u0645\u0636\u0645\u0646\u0629 \u0644\u0644\u0623\u0646\u0634\u0637\u0629 \u0627\u0644\u0636\u0627\u0631\u0629.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u0648\u062c\u0647\u0627\u062a \u0646\u0638\u0631 \u0648\u062a\u0642\u0646\u064a\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u0642\u0628\u0644 \u0627\u0644\u0645\u062a\u0639\u0644\u0642\u0629 \u0628\u0640 LOLBin<\/h2>\n<p>\u0645\u0639 \u062a\u0637\u0648\u0631 \u0627\u0644\u062a\u0643\u0646\u0648\u0644\u0648\u062c\u064a\u0627\u060c \u062a\u062a\u0637\u0648\u0631 \u0623\u064a\u0636\u064b\u0627 \u0627\u0644\u062a\u0642\u0646\u064a\u0627\u062a \u0627\u0644\u062a\u064a \u064a\u0633\u062a\u062e\u062f\u0645\u0647\u0627 \u0643\u0644 \u0645\u0646 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0648\u0627\u0644\u0645\u062f\u0627\u0641\u0639\u064a\u0646. \u0645\u0646 \u0627\u0644\u0645\u062d\u062a\u0645\u0644 \u0623\u0646 \u064a\u062a\u0636\u0645\u0646 \u0645\u0633\u062a\u0642\u0628\u0644 LOLBins \u0648\u0625\u062c\u0631\u0627\u0621\u0627\u062a\u0647\u0627 \u0627\u0644\u0645\u0636\u0627\u062f\u0629 \u0645\u0627 \u064a\u0644\u064a:<\/p>\n<ol>\n<li>\n<p><strong>\u0627\u0644\u0643\u0634\u0641 \u0627\u0644\u0642\u0627\u0626\u0645 \u0639\u0644\u0649 \u0627\u0644\u0630\u0643\u0627\u0621 \u0627\u0644\u0627\u0635\u0637\u0646\u0627\u0639\u064a<\/strong>: \u0633\u062a\u0639\u0645\u0644 \u0627\u0644\u062d\u0644\u0648\u0644 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0627\u0644\u0645\u062f\u0639\u0648\u0645\u0629 \u0628\u0627\u0644\u0630\u0643\u0627\u0621 \u0627\u0644\u0627\u0635\u0637\u0646\u0627\u0639\u064a \u0639\u0644\u0649 \u062a\u062d\u0633\u064a\u0646 \u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u0646\u062f\u0629 \u0625\u0644\u0649 LOLBin \u0648\u0645\u0646\u0639\u0647\u0627 \u0645\u0646 \u062e\u0644\u0627\u0644 \u062a\u062d\u0644\u064a\u0644 \u0643\u0645\u064a\u0627\u062a \u0647\u0627\u0626\u0644\u0629 \u0645\u0646 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0648\u062a\u062d\u062f\u064a\u062f \u0627\u0644\u0623\u0646\u0645\u0627\u0637 \u0627\u0644\u062a\u064a \u062a\u0634\u064a\u0631 \u0625\u0644\u0649 \u0627\u0644\u0633\u0644\u0648\u0643 \u0627\u0644\u0636\u0627\u0631.<\/p>\n<\/li>\n<li>\n<p><strong>\u062a\u062d\u0633\u064a\u0646\u0627\u062a \u0627\u0644\u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u0633\u0644\u0648\u0643\u064a<\/strong>: \u0633\u062a\u0635\u0628\u062d \u0622\u0644\u064a\u0627\u062a \u0627\u0644\u0643\u0634\u0641 \u0627\u0644\u0642\u0627\u0626\u0645\u0629 \u0639\u0644\u0649 \u0627\u0644\u0633\u0644\u0648\u0643 \u0623\u0643\u062b\u0631 \u062a\u0639\u0642\u064a\u062f\u064b\u0627\u060c \u0648\u0633\u062a\u062a\u0645\u0643\u0646 \u0645\u0646 \u0627\u0644\u062a\u0645\u064a\u064a\u0632 \u0628\u0634\u0643\u0644 \u0623\u0641\u0636\u0644 \u0628\u064a\u0646 \u0627\u0644\u0623\u0646\u0634\u0637\u0629 \u0627\u0644\u0645\u0634\u0631\u0648\u0639\u0629 \u0648\u0627\u0644\u062e\u0628\u064a\u062b\u0629.<\/p>\n<\/li>\n<li>\n<p><strong>\u0647\u0646\u062f\u0633\u0629 \u0627\u0644\u062b\u0642\u0629 \u0627\u0644\u0645\u0639\u062f\u0648\u0645\u0629<\/strong>: \u0642\u062f \u062a\u062a\u0628\u0646\u0649 \u0627\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u0645\u0628\u0627\u062f\u0626 \u0627\u0644\u062b\u0642\u0629 \u0627\u0644\u0645\u0639\u062f\u0648\u0645\u0629\u060c \u0648\u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0643\u0644 \u0625\u062c\u0631\u0627\u0621 \u0642\u0628\u0644 \u0627\u0644\u0633\u0645\u0627\u062d \u0628\u0627\u0644\u062a\u0646\u0641\u064a\u0630\u060c \u0645\u0645\u0627 \u064a\u0642\u0644\u0644 \u0645\u0646 \u062a\u0623\u062b\u064a\u0631 LOLBins.<\/p>\n<\/li>\n<li>\n<p><strong>\u0623\u0645\u0646 \u0627\u0644\u0623\u062c\u0647\u0632\u0629<\/strong>: \u0642\u062f \u062a\u0633\u0627\u0639\u062f \u0645\u064a\u0632\u0627\u062a \u0627\u0644\u0623\u0645\u0627\u0646 \u0627\u0644\u0645\u0633\u062a\u0646\u062f\u0629 \u0625\u0644\u0649 \u0627\u0644\u0623\u062c\u0647\u0632\u0629 \u0641\u064a \u0625\u062d\u0628\u0627\u0637 \u0647\u062c\u0645\u0627\u062a LOLBin \u0645\u0646 \u062e\u0644\u0627\u0644 \u0641\u0631\u0636 \u0639\u0645\u0644\u064a\u0627\u062a \u0639\u0632\u0644 \u0648\u062a\u0643\u0627\u0645\u0644 \u0623\u0642\u0648\u0649.<\/p>\n<\/li>\n<\/ol>\n<h2>\u0643\u064a\u0641 \u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u0644\u062e\u0648\u0627\u062f\u0645 \u0627\u0644\u0648\u0643\u064a\u0644\u0629 \u0623\u0648 \u0631\u0628\u0637\u0647\u0627 \u0628\u0640 LOLBin<\/h2>\n<p>\u062a\u0644\u0639\u0628 \u0627\u0644\u062e\u0648\u0627\u062f\u0645 \u0627\u0644\u0648\u0643\u064a\u0644\u0629 \u062f\u0648\u0631\u064b\u0627 \u062d\u0627\u0633\u0645\u064b\u0627 \u0641\u064a \u0627\u0644\u062f\u0641\u0627\u0639 \u0636\u062f \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u0646\u062f\u0629 \u0625\u0644\u0649 LOLBin. \u0648\u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647\u0627 \u0628\u0627\u0644\u0637\u0631\u0642 \u0627\u0644\u062a\u0627\u0644\u064a\u0629:<\/p>\n<ol>\n<li>\n<p><strong>\u0627\u0644\u062a\u0641\u062a\u064a\u0634 \u0627\u0644\u0645\u0631\u0648\u0631\u064a<\/strong>: \u064a\u0645\u0643\u0646 \u0644\u0644\u062e\u0648\u0627\u062f\u0645 \u0627\u0644\u0648\u0643\u064a\u0644\u0629 \u0641\u062d\u0635 \u062d\u0631\u0643\u0629 \u0645\u0631\u0648\u0631 \u0627\u0644\u0634\u0628\u0643\u0629 \u0628\u062d\u062b\u064b\u0627 \u0639\u0646 \u0627\u0644\u0623\u0646\u0645\u0627\u0637 \u0627\u0644\u0645\u0634\u0628\u0648\u0647\u0629\u060c \u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 \u0627\u0644\u0627\u062a\u0635\u0627\u0644\u0627\u062a \u0627\u0644\u0645\u0631\u062a\u0628\u0637\u0629 \u0639\u0627\u062f\u0629\u064b \u0628\u0640 LOLBins.<\/p>\n<\/li>\n<li>\n<p><strong>\u062a\u0635\u0641\u064a\u0629 \u0627\u0644\u0645\u062d\u062a\u0648\u0649 \u0627\u0644\u0636\u0627\u0631<\/strong>: \u064a\u0645\u0643\u0646 \u0644\u0644\u0648\u0643\u0644\u0627\u0621 \u062d\u0638\u0631 \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0627\u0644\u0646\u0637\u0627\u0642\u0627\u062a \u0627\u0644\u0636\u0627\u0631\u0629 \u0627\u0644\u0645\u0639\u0631\u0648\u0641\u0629 \u0648\u0639\u0646\u0627\u0648\u064a\u0646 IP \u0627\u0644\u062a\u064a \u064a\u0633\u062a\u062e\u062f\u0645\u0647\u0627 \u0645\u0634\u063a\u0644\u0648 LOLBin.<\/p>\n<\/li>\n<li>\n<p><strong>\u0641\u0643 \u062a\u0634\u0641\u064a\u0631 SSL\/TLS<\/strong>: \u064a\u0645\u0643\u0646 \u0644\u0644\u0648\u0643\u0644\u0627\u0621 \u0641\u0643 \u062a\u0634\u0641\u064a\u0631 \u062d\u0631\u0643\u0629 \u0627\u0644\u0645\u0631\u0648\u0631 \u0627\u0644\u0645\u0634\u0641\u0631\u0629 \u0648\u0641\u062d\u0635\u0647\u0627 \u0644\u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062d\u0645\u0648\u0644\u0627\u062a \u0627\u0644\u0636\u0627\u0631\u0629 \u0627\u0644\u062a\u064a \u064a\u062a\u0645 \u062a\u0633\u0644\u064a\u0645\u0647\u0627 \u0639\u0628\u0631 LOLBins \u0648\u062d\u0638\u0631\u0647\u0627.<\/p>\n<\/li>\n<li>\n<p><strong>\u0643\u0634\u0641 \u0625\u062e\u0641\u0627\u0621 \u0627\u0644\u0647\u0648\u064a\u0629<\/strong>: \u064a\u0645\u0643\u0646 \u0644\u0644\u0648\u0643\u0644\u0627\u0621 \u062a\u062d\u062f\u064a\u062f \u0648\u0645\u0646\u0639 \u0645\u062d\u0627\u0648\u0644\u0627\u062a \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062a\u0642\u0646\u064a\u0627\u062a \u0625\u062e\u0641\u0627\u0621 \u0627\u0644\u0647\u0648\u064a\u0629 \u0644\u0625\u062e\u0641\u0627\u0621 \u062d\u0631\u0643\u0629 \u0645\u0631\u0648\u0631 LOLBin.<\/p>\n<\/li>\n<\/ol>\n<h2>\u0631\u0648\u0627\u0628\u0637 \u0630\u0627\u062a \u0639\u0644\u0627\u0642\u0629<\/h2>\n<p>\u0644\u0645\u0632\u064a\u062f \u0645\u0646 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u062d\u0648\u0644 LOLBins \u0648\u0623\u0641\u0636\u0644 \u0645\u0645\u0627\u0631\u0633\u0627\u062a \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a\u060c \u064a\u0645\u0643\u0646\u0643 \u0627\u0644\u0631\u062c\u0648\u0639 \u0625\u0644\u0649 \u0627\u0644\u0645\u0648\u0627\u0631\u062f \u0627\u0644\u062a\u0627\u0644\u064a\u0629:<\/p>\n<ol>\n<li><a href=\"https:\/\/www.blackhat.com\/docs\/us-15\/materials\/us-15-Smith-Living-Off-The-Land-And-Evading-Endpoint-Security-For-Fun-And-Profit.pdf\" target=\"_new\" rel=\"noopener nofollow\">\u0627\u0644\u0639\u064a\u0634 \u062e\u0627\u0631\u062c \u0627\u0644\u0623\u0631\u0636 \u0648\u0627\u0644\u062a\u0647\u0631\u0628 \u0645\u0646 \u0627\u0644\u0643\u0634\u0641 \u2013 \u062f\u0631\u0627\u0633\u0629 \u0627\u0633\u062a\u0642\u0635\u0627\u0626\u064a\u0629 \u0644\u0644\u0645\u0645\u0627\u0631\u0633\u0627\u062a \u0627\u0644\u0634\u0627\u0626\u0639\u0629<\/a> \u2013 \u0648\u0631\u0642\u0629 \u0628\u062d\u062b\u064a\u0629 \u0644\u0643\u064a\u0633\u064a \u0633\u0645\u064a\u062b\u060c 2014.<\/li>\n<li><a href=\"https:\/\/attack.mitre.org\/techniques\/T1218\/\" target=\"_new\" rel=\"noopener nofollow\">\u0645\u064a\u062a\u0631\u064a ATT&amp;CK - LOLBins<\/a> - \u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0639\u0646 LOLBins \u0641\u064a \u0625\u0637\u0627\u0631 \u0639\u0645\u0644 MITRE ATT&amp;CK.<\/li>\n<li><a href=\"https:\/\/www.sans.org\/cyber-security-summit\/archives\/file\/summit-archive-1492182931.pdf\" target=\"_new\" rel=\"noopener nofollow\">\u0627\u0644\u062f\u0641\u0627\u0639 \u0636\u062f LOLBAS<\/a> - \u0648\u0631\u0642\u0629 \u0639\u0645\u0644 \u062d\u0648\u0644 \u0627\u0644\u062f\u0641\u0627\u0639 \u0636\u062f \u0627\u0644\u062b\u0646\u0627\u0626\u064a\u0627\u062a \u0648\u0627\u0644\u0646\u0635\u0648\u0635 \u0627\u0644\u062a\u064a \u062a\u0639\u064a\u0634 \u062e\u0627\u0631\u062c \u0627\u0644\u0623\u0631\u0636.<\/li>\n<\/ol>\n<p>\u062a\u0645\u062b\u0644 LOLBins \u062a\u062d\u062f\u064a\u064b\u0627 \u0643\u0628\u064a\u0631\u064b\u0627 \u0641\u064a \u0627\u0644\u0645\u0634\u0647\u062f \u0627\u0644\u0645\u062a\u0637\u0648\u0631 \u0628\u0627\u0633\u062a\u0645\u0631\u0627\u0631 \u0644\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a. \u064a\u0639\u062f \u0641\u0647\u0645 \u062a\u0642\u0646\u064a\u0627\u062a\u0647\u0645 \u0648\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u0633\u062a\u0631\u0627\u062a\u064a\u062c\u064a\u0627\u062a \u0627\u0644\u062f\u0641\u0627\u0639 \u0627\u0644\u0627\u0633\u062a\u0628\u0627\u0642\u064a\u0629 \u0623\u0645\u0631\u064b\u0627 \u0628\u0627\u0644\u063a \u0627\u0644\u0623\u0647\u0645\u064a\u0629 \u0641\u064a \u062d\u0645\u0627\u064a\u0629 \u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0648\u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0645\u0646 \u0647\u0630\u0647 \u0627\u0644\u062a\u0647\u062f\u064a\u062f\u0627\u062a \u0627\u0644\u062e\u0628\u064a\u062b\u0629.<\/p>","protected":false},"featured_media":477881,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-477880","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>LOLBin: Living Off the Land Binaries for Cybersecurity<\/mark>","faq_items":[{"question":"What is LOLBin?","answer":"<p>LOLBin, short for \"Living Off the Land Binaries,\" refers to legitimate executables, tools, or scripts on a Windows operating system that cyber adversaries abuse for malicious activities. These pre-installed binaries allow attackers to evade detection and execute various commands without raising suspicion.<\/p>"},{"question":"How did LOLBin originate?","answer":"<p>The concept of LOLBins gained prominence around 2014 when researchers noticed an increase in fileless attacks and techniques using built-in Windows binaries for malicious purposes. The term was first mentioned in a research paper titled \"Living off the Land and Evading Detection - A Survey of Common Practices\" by Casey Smith in 2014.<\/p>"},{"question":"How do LOLBins work?","answer":"<p>LOLBins are native Windows binaries that come pre-installed on the system, designed for legitimate administrative tasks. Cybercriminals manipulate these binaries to perform malicious activities, leveraging their legitimate appearance and functionalities to avoid detection.<\/p>"},{"question":"What are the key features of LOLBins?","answer":"<p>LOLBins offer several key features that attract threat actors, including their legitimate appearance, invisibility, fileless execution, and abuse of trusted tools.<\/p>"},{"question":"What types of LOLBins exist?","answer":"<p>LOLBins come in various types, including PowerShell Scripts, Windows Management Instrumentation (WMI), Windows Command Prompt (cmd.exe), and Windows Script Host (wscript.exe, cscript.exe).<\/p>"},{"question":"How are LOLBins used, and what are the associated problems?","answer":"<p>LOLBins are used for privilege escalation, information gathering, lateral movement, and persistence. The associated problems include difficulty in detection, visibility, whitelisting abuse, and mitigation challenges.<\/p>"},{"question":"How can organizations counter LOLBin-based attacks?","answer":"<p>Organizations can adopt a multi-layered security approach involving behavioral analysis, anomaly detection, advanced endpoint protection, and user education to mitigate LOLBin threats effectively.<\/p>"},{"question":"What are the future perspectives and technologies related to LOLBins?","answer":"<p>The future of LOLBins may involve AI-driven detection, enhanced behavioral analysis, zero trust architecture, and hardware-based security features to combat these threats effectively.<\/p>"},{"question":"How can proxy servers help with LOLBin defense?","answer":"<p>Proxy servers can assist in LOLBin defense by inspecting traffic, filtering malicious content, decrypting SSL\/TLS traffic, and detecting anonymization attempts.<\/p>"},{"question":"Where can I find more information about LOLBins?","answer":"<p>For more information on LOLBins and cybersecurity best practices, refer to the provided related links, research papers, and the MITRE ATT&amp;CK framework.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/ar\/wp-json\/wp\/v2\/wiki\/477880","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/ar\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/ar\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/ar\/wp-json\/wp\/v2\/wiki\/477880\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/ar\/wp-json\/wp\/v2\/media\/477881"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/ar\/wp-json\/wp\/v2\/media?parent=477880"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}