Reference

Living Off the Land — LOLBAS & GTFOBins

Trusted, signed, already-present binaries abused to download, execute, read/write, or bypass controls — so there is no custom tooling to detect. Windows entries mirror the LOLBAS project; Linux entries mirror GTFOBins. Filter by OS and function; click a reference for the full technique.