.. /Odbcconf.exe
Star

Execute (DLL)

Used in Windows for managing ODBC connections


Paths:

Resources:
Acknowledgements:

Detection:

Execute

  1. Execute DllREgisterServer from DLL specified.

    odbcconf /a {REGSVR c:\test\test.dll}
    Use case
    Execute dll file using technique that can evade defensive counter measures
    Privileges required
    User
    Operating systems
    Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
    ATT&CK® technique
    T1218.008
    Tags
    Execute: DLL
    This LOLBAS executes Dynamic-Link Libraries (DLLs).

  2. Install a driver and load the DLL. Requires administrator privileges.

    odbcconf INSTALLDRIVER "lolbas-project|Driver=c:\test\test.dll|APILevel=2"
odbcconf configsysdsn "lolbas-project" "DSN=lolbas-project"
    Use case
    Execute dll file using technique that can evade defensive counter measures
    Privileges required
    User
    Operating systems
    Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
    ATT&CK® technique
    T1218.008
    Tags
    Execute: DLL
    This LOLBAS executes Dynamic-Link Libraries (DLLs).

  3. Load DLL specified in target .RSP file. See the Code Sample section for an example .RSP file.

    odbcconf -f file.rsp
    Use case
    Execute dll file using technique that can evade defensive counter measures
    Privileges required
    User
    Operating systems
    Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
    ATT&CK® technique
    T1218.008