The windows lolbins project is decent as well. Some suggest these are great for CTFs,but their main use is for defensive restrictions and monitoring. Based on

The windows lolbins project is decent as well. Some suggest these are great for CTFs,but their main use is for defensive restrictions and monitoring. Based on these known abusable behaviors of the programs,you can for example construct auditd rules or selinux/apparmor policies. And no,these are not exploits or vulnerabilities,they're just ways of performing post-compromise tasks without having to bring your own malware or operating within a restricted environment.