/tags/edrbypass/ Recent content in EDRBypass on Vanilla InfoSec Hugo -- gohugo.io en Mon, 29 Jun 2026 00:00:00 +0000 /posts/belphc2---c2-comms-via-youtube-comments/ Mon, 29 Jun 2026 00:00:00 +0000 /posts/belphc2---c2-comms-via-youtube-comments/ LOTs & Unconventional Communications A couple years ago I discovered the LOTS project, around when I started learning about GTFOBins and LOLBAS: https://lots-project.com/ Living Off Trusted Sites (LOTS) Project Attackers are using popular legitimate domains when conducting phishing, C&C, exfiltration and downloading tools to evade detection. The list of websites below allow attackers to use their domain or subdomain. Website design credits: LOLBAS & GTFOBins When preparing for my talk at OISC discussing defense evasion, this struck me as a perfect technique to capture the attention of the audience and hit the points home!