RTT· red team
RTT · red team
Advanced Search Keywords:
  • opsec:low - Show techniques with low noise level (stealthy)
  • phase:"initial access" - Filter by phase (use quotes for spaces)
  • category:lateral - Filter by category
  • platform:windows - Filter by platform
  • tag:credential - Find items with specific tag in results
  • external:true - Show only external techniques
Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase
TechniquesToolsCommandsAPTs
Search techniques, tools, commands…⌘K
No scenario
No scenario · all techniques in scope
IdleStatus
0Scenarios
Advanced Search Keywords:
  • opsec:low - Show techniques with low noise level (stealthy)
  • phase:"initial access" - Filter by phase (use quotes for spaces)
  • category:lateral - Filter by category
  • platform:windows - Filter by platform
  • tag:credential - Find items with specific tag in results
  • external:true - Show only external techniques
Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Active filters:

phase: Domain Enumeration

Resource Development

0 items

Initial Access

0 items

Reconnaissance

0 items

Host Enumeration

0 items

Persistence

0 items

Privilege Escalation

0 items

Domain Enumeration

63 items

AD Enumeration

54

Account Discovery

Active Directory Account Discovery from Description Attributes

Active Directory Attack Path Collection

Active Directory Domain Group Discovery

Active Directory Domain Password Policy Discovery

Active Directory Trust Enumeration

AD Computer Discovery for LAPS Password-Attribute Gaps

AD CS Template Permission Discovery

Anonymous LDAP Binding Enumeration

Crawl link chain

Cross-Domain BloodHound Collection

Cross-Domain Group Enumeration

Domain Account Discovery

Domain Account Enumeration via PowerShell and SMB

Domain Controller Discovery

Domain Groups Discovery

Domain Trust Discovery

Email Account Discovery

Enum deleted objects

Enum disabled accounts

Enum linked servers

Enum pre2k accounts

Enumerate Active Directory Certificate Services (AD CS)

Enumerate Active Directory Domain Objects and Trusts

Enumerate Active Directory Object ACLs

Enumerate Active Directory via LDAPS

Enumerate Domain Accounts

Enumerate Domain Users

Enumerate Local or Domain Groups

Enumerate SPNs

Extract Secrets from Backups

Find gMSA readers

Find MSSQL (SPN enum)

Find Schema v1 tmpl

Find unconstrained host

Find WebClient enabled

Find writable deleted obj

Foreign Group Membership

Group Policy Discovery

Inactive Domain Account Discovery

Internal Name Resolution

Kerberos Delegation Enumeration

LAPS Configuration Discovery

LDAP Enumeration

LDAP Object Enumeration via bloodyAD

LDAP Signing and Channel Binding Check

Missing Protected Users Group Membership

Organizational Structure Enumeration

Password Policy Discovery

Protected Users Membership Coverage Audit

SCCM Distribution Point Discovery

sccmhunter find

Unauthenticated Enumeration

Writable Object Enumeration

AWS Cloud

1

Cloud Account Discovery

Azure Cloud

2

Azure Resource / Subscription Enumeration

Entra ID / Azure AD Object Extraction

Database Enumeration

1

Database Permission Discovery

Local Host Enumeration

1

Citrix Broker Session Enumeration

Network Scanning

2

Network Service Discovery

Network Service Discovery with Nmap

Phishing

1

Host and Domain Enumeration

Ticket Manipulation

1

AS-REP Roasting Preauthentication Audit

Lateral Movement

0 items

Credentials & User Impersonation

0 items

AD Misconfigurations

0 items

Defense Evasion

0 items

Collection

0 items

Exfiltration

0 items