--- title: h?ckers a[r]e gl*bbing | daily.dev description: LOL Globs is a new open-source catalog documenting wildcard-based command obfuscation techniques across Linux, macOS, Windows CMD, and PowerShell. The project,... canonical: https://daily.dev/posts/h-ckers-a-r-e-gl-bbing-hczhpy97u twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: h?ckers a[r]e gl*bbing | daily.dev og:description: LOL Globs is a new open-source catalog documenting wildcard-based command obfuscation techniques across Linux, macOS, Windows CMD, and PowerShell. The project,... og:url: https://daily.dev/posts/h-ckers-a-r-e-gl-bbing-hczhpy97u og:image: https://api.daily.dev/og/posts/HcZHpY97U.png og:image:alt: h?ckers a[r]e gl*bbing og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # h?ckers a[r]e gl*bbing **[John Hammond](https://daily.dev/sources/johnhammond)** · 16 min read · 0 upvotes · 0 comments ## Summary LOL Globs is a new open-source catalog documenting wildcard-based command obfuscation techniques across Linux, macOS, Windows CMD, and PowerShell. The project, created by security researcher Hex V1N (Gabriel), focuses on how attackers can use glob patterns like asterisks and question marks to evade literal string-based detections in EDR and security tools. The video walks through practical PowerShell demos showing how invoke-rest-method and invoke-expression can be masked using wildcard substitution, making command lines unrecognizable to signature-based detection. The project complements existing resources like Argfuscator (argument obfuscation) and the broader LOLBins/GTFOBins ecosystem. Also mentioned: Poly Uploader for staging payloads across 133+ hosting sites, and the living-off-trusted-sites resource. The video is sponsored by Exforce, an agentic AI SOC platform. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [GTFOBins](https://daily.dev/posts/gtfobins-jkncd3jiq) · Hacker News · 1 upvotes · 0 comments - [Gremlin Stealer's Evolved Tactics: Hiding in Plain Sight With Resource Files](https://daily.dev/posts/gremlin-stealer-s-evolved-tactics-hiding-in-plain-sight-with-resource-files-u5yf7xzma) · Unit 42 · 2 upvotes · 0 comments - [The Enemy Already Inside — Hunt Forward Lab \#002: LOLBAS Detection](https://daily.dev/posts/the-enemy-already-inside-hunt-forward-lab-002-lolbas-detection-kfpatesoo) · InfoSec Write-ups · 0 upvotes · 0 comments --- Tags: [#powershell](https://daily.dev/tags/powershell) [View this post on daily.dev](https://daily.dev/posts/h-ckers-a-r-e-gl-bbing-hczhpy97u) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"h?ckers a[r]e gl*bbing","url":"https://daily.dev/posts/h-ckers-a-r-e-gl-bbing-hczhpy97u","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/h-ckers-a-r-e-gl-bbing-hczhpy97u"},"datePublished":"2026-02-27T15:48:18.638Z","dateModified":"2026-02-27T15:48:39.401Z","description":"LOL Globs is a new open-source catalog documenting wildcard-based command obfuscation techniques across Linux, macOS, Windows CMD, and PowerShell. The project,...","image":"https://i.ytimg.com/vi/IImLVU39V_Q/sddefault.jpg","thumbnailUrl":"https://i.ytimg.com/vi/IImLVU39V_Q/sddefault.jpg","isAccessibleForFree":true,"articleSection":"John Hammond","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"John Hammond","logo":"https://media.daily.dev/image/upload/s--Oh7b_KW---/f_auto/v1729363281/logos/johnhammond","url":"https://daily.dev/sources/johnhammond"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/h-ckers-a-r-e-gl-bbing-hczhpy97u","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"powershell","timeRequired":"PT16M","video":{"@type":"VideoObject","name":"h?ckers a[r]e gl*bbing","description":"LOL Globs is a new open-source catalog documenting wildcard-based command obfuscation techniques across Linux, macOS, Windows CMD, and PowerShell. The project,...","thumbnailUrl":"https://i.ytimg.com/vi/IImLVU39V_Q/sddefault.jpg","uploadDate":"2026-02-27T15:48:18.638Z","duration":"PT16M","url":"https://api.daily.dev/r/HcZHpY97U","embedUrl":"https://www.youtube.com/embed/IImLVU39V_Q"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"John Hammond","item":"https://daily.dev/sources/johnhammond"},{"@type":"ListItem","position":3,"name":"h?ckers a[r]e gl*bbing"}]} ```