Skip to content

Commit 4012d70

Browse files
1 parent 14e1725 commit 4012d70

File tree

1 file changed

+28
-0
lines changed

1 file changed

+28
-0
lines changed

_lolbas/Binaries/odbcad32.md

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
---
2+
Name: odbcad32.exe
3+
Description: ODBC Data Source Administrator to manage User/System DSNs and ODBC drivers.
4+
Author: 'Ekitji'
5+
Created: 2025-09-04
6+
Commands:
7+
- Command: odbcad32.exe
8+
Description: Launch odbcad32.exe GUI, click 'Tracing' tab, click 'Browsing' button, enter abitrary command in the File Dialog's path, press enter.
9+
Usecase: Execute a binary as a high-integrity process without a UAC prompt.
10+
Category: UAC Bypass
11+
Privileges: User
12+
MitreID: T1548.002
13+
OperatingSystem: Windows 10, Windows 11
14+
Tags:
15+
- Execute: CMD
16+
- Application: GUI
17+
Full_Path:
18+
- Path: c:\windows\system32\odbcad32.exe
19+
- Path: c:\windows\syswow64\odbcad32.exe
20+
Detection:
21+
- IOC: odbcad32.exe spawning unexpected child processes.
22+
Resources:
23+
- Link: https://medium.com/@thebinaryhashira/living-off-the-land-and-living-above-uac-6a66738d225c
24+
Acknowledgement:
25+
- Person: amonitoring
26+
- Person: Ekitji
27+
Handle: '@eki_erk'
28+
---

0 commit comments

Comments
 (0)