npm package discovery and stats viewer.

Discover Tips

  • General search

    [free text search, go nuts!]

  • Package details

    pkg:[package-name]

  • User packages

    @[username]

Sponsor

Optimize Toolset

I’ve always been into building performant and accessible sites, but lately I’ve been taking it extremely seriously. So much so that I’ve been building a tool to help me optimize and monitor the sites that I build to make sure that I’m making an attempt to offer the best experience to those who visit them. If you’re into performant, accessible and SEO friendly sites, you might like it too! You can check it out at Optimize Toolset.

About

Hi, 👋, I’m Ryan Hefner  and I built this site for me, and you! The goal of this site was to provide an easy way for me to check the stats on my npm packages, both for prioritizing issues and updates, and to give me a little kick in the pants to keep up on stuff.

As I was building it, I realized that I was actually using the tool to build the tool, and figured I might as well put this out there and hopefully others will find it to be a fast and useful way to search and browse npm packages as I have.

If you’re interested in other things I’m working on, follow me on Twitter or check out the open source projects I’ve been publishing on GitHub.

I am also working on a Twitter bot for this site to tweet the most popular, newest, random packages from npm. Please follow that account now and it will start sending out packages soon–ish.

Open Software & Tools

This site wouldn’t be possible without the immense generosity and tireless efforts from the people who make contributions to the world and share their work via open source initiatives. Thank you 🙏

© 2026 – Pkg Stats / Ryan Hefner

living-off-the-land-lolbins-mcp-server

v0.1.0

Published

Living off the Land binaries MCP server — GTFOBins, LOLBAS, LOOBins, LOLDrivers, LOLRMM, LOLESXi, LOTP, LOLC2, WADComs intelligence with attack graph reasoning, privilege escalation paths, defense evasion, detection engineering

Vulnerabilities

Powered byPowered by Snyk
  • 0High
  • 0Medium
  • 0Low

Links

Git

Maintainers

orhnyldrmorhnyldrm

Keywords

mcpmodel-context-protocolliving-off-the-landlolbinslolbasgtfobinsloobinsloldriverslolrmmlolesxilolc2wadcomslotploflcabprivilege-escalationdefense-evasionlateral-movementpersistenceattack-graphmitre-attckred-teamblue-teampurple-teamdetection-engineeringsigmasysmonpentestoffensive-securityosintcybersecuritysecurityinfosecaiai-agentclaudellm

Readme

概述

living-off-the-land-lolbins-mcp-server 通过 Model Context Protocol 为您的 AI 代理提供 59 个组合工具（共 321 个子工具），覆盖 10 个 LOL 目录。代理并行查询所有目录，跨平台关联二进制文件，发现提权路径，生成检测规则，并呈现统一的攻防态势。

Living off the Land 二进制情报分散在 GTFOBins、LOLBAS、LOOBins、LOLDrivers 等 10 多个独立目录中，各有不同的格式和架构。本项目将它们统一到一个 MCP 服务器中，让 AI 代理能够同时跨所有目录进行推理，实现攻击规划、防御验证和紫队演练。

所有 10 个目录均为开源数据，无需 API 密钥。一条命令即可启动，零配置。

快速开始

npx living-off-the-land-lolbins-mcp-server

Claude Code

claude mcp add lolbins-mcp-server -- npx living-off-the-land-lolbins-mcp-server

Claude Desktop

{
  "mcpServers": {
    "lolbins": {
      "command": "npx",
      "args": ["-y", "living-off-the-land-lolbins-mcp-server"]
    }
  }
}

数据源 (10)

| 目录 | 平台 | 条目数 | 说明 | |------|------|--------|------| | GTFOBins | Linux/Unix | 400+ | 可用于提权、文件操作、shell 逃逸的 Unix 二进制文件 | | LOLBAS | Windows | 250+ | 用于执行、绕过、持久化的 Windows LOL 二进制文件 | | LOOBins | macOS | 50+ | 可用于攻击操作的 macOS 原生二进制文件 | | LOLDrivers | Windows (内核) | 700+ | 用于 BYOVD 攻击的漏洞内核驱动 | | LOLRMM | 跨平台 | 100+ | 被滥用于持久化和远程访问的合法 RMM 工具 | | LOLESXi | VMware ESXi | 30+ | 用于虚拟机逃逸和虚拟化管理程序操控的 ESXi 二进制文件 | | LOTP | 跨平台 | 40+ | 被滥用于恶意目的的受信任平台和服务 | | LOLC2 | 跨平台 | 30+ | 被滥用为命令控制通道的合法服务 | | LOFLCAB | 跨平台 | 20+ | 固件、BIOS 和 Cabinet 文件利用技术 | | WADComs | Windows AD | 150+ | Active Directory 攻击命令和技术 |

完整的工具参考、架构详情和使用示例请参阅 英文 README。