.. /Odbcconf.exe
Star

Execute (DLL)

Used in Windows for managing ODBC connections

Paths:

Resources:

Acknowledgements:

Detections:

Execute

  1. Execute DllREgisterServer from DLL specified.

    odbcconf /a {REGSVR c:\test\test.dll}
    Use case
    Execute dll file using technique that can evade defensive counter measures
    Privileges required
    User
    Operating systems
    Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
    ATT&CK® technique
    T1218.008
    Tags
    Execute: DLL

  2. Install a driver and load the DLL. Requires administrator privileges.

    odbcconf INSTALLDRIVER "lolbas-project|Driver=c:\test\test.dll|APILevel=2"
odbcconf configsysdsn "lolbas-project" "DSN=lolbas-project"
    Use case
    Execute dll file using technique that can evade defensive counter measures
    Privileges required
    User
    Operating systems
    Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
    ATT&CK® technique
    T1218.008
    Tags
    Execute: DLL

  3. Load DLL specified in target .RSP file. See the Code Sample section for an example .RSP file.

    odbcconf -f file.rsp
    Use case
    Execute dll file using technique that can evade defensive counter measures
    Privileges required
    Administrator
    Operating systems
    Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
    ATT&CK® technique
    T1218.008