AndyFul / Hard_Configurator

GUI to Manage Software Restriction Policies and harden Windows Home OS
Other
506 stars 44 forks source link

Add Additional LOL Bins #26

Open sr093906 opened 1 week ago

sr093906 commented 1 week ago

Based on https://lolbas-project.github.io/, it seems that some LOL Bins can be added to Firewall policy. For example,

https://lolbas-project.github.io/lolbas/Binaries/Cmdl32/ https://lolbas-project.github.io/lolbas/Binaries/ConfigSecurityPolicy/ https://lolbas-project.github.io/lolbas/Binaries/DataSvcUtil/ https://lolbas-project.github.io/lolbas/Binaries/Diantz/ https://lolbas-project.github.io/lolbas/Binaries/Ieexec/ https://lolbas-project.github.io/lolbas/Binaries/IMEWDBLD/ https://lolbas-project.github.io/lolbas/Binaries/Ldifde/ https://lolbas-project.github.io/lolbas/Binaries/PrintBrm/ https://lolbas-project.github.io/lolbas/OtherMSBinaries/MsoHtmEd/ https://lolbas-project.github.io/lolbas/OtherMSBinaries/ProtocolHandler/ https://lolbas-project.github.io/lolbas/OtherMSBinaries/Squirrel/ https://lolbas-project.github.io/lolbas/OtherMSBinaries/Update/ https://lolbas-project.github.io/lolbas/OtherMSBinaries/devtunnels/ https://lolbas-project.github.io/lolbas/OtherMSBinaries/xsd/ ...

AndyFul commented 1 week ago

Hi,

Thanks. I will keep an eye on those LOLBins. For now, they are not used in attacks on non-enterprise users.