Skip to content

Conversation

@Mahir-Ali-khan
Copy link
Contributor

Created a New PR to add BCP.exe to lolbas , this binary allows attacker to stage and dump payload to victim host using MS SQL DB

@Mahir-Ali-khan Mahir-Ali-khan requested a review from a team as a code owner November 13, 2025 06:21
Copy link
Contributor Author

@Mahir-Ali-khan Mahir-Ali-khan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

indentation issue

Copy link
Contributor Author

@Mahir-Ali-khan Mahir-Ali-khan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

error in syntax now fixed

Copy link
Contributor Author

@Mahir-Ali-khan Mahir-Ali-khan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

syntax issue

Copy link
Member

@wietze wietze left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bit of an odd one for the "download" category, nor is it strictly speaking "unexpected". Yet given it is unusual (especially when utilising the -S option) and because has been abused in the wild, i think it meets the criteria.

@wietze wietze merged commit f793a4d into LOLBAS-Project:master Dec 6, 2025
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants