RTT· red team
RTT · red team
Advanced Search Keywords:
  • opsec:low - Show techniques with low noise level (stealthy)
  • phase:"initial access" - Filter by phase (use quotes for spaces)
  • category:lateral - Filter by category
  • platform:windows - Filter by platform
  • tag:credential - Find items with specific tag in results
  • external:true - Show only external techniques
Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase
TechniquesToolsCommandsAPTs
Search techniques, tools, commands…⌘K
No scenario
No scenario · all techniques in scope
IdleStatus
0Scenarios
Advanced Search Keywords:
  • opsec:low - Show techniques with low noise level (stealthy)
  • phase:"initial access" - Filter by phase (use quotes for spaces)
  • category:lateral - Filter by category
  • platform:windows - Filter by platform
  • tag:credential - Find items with specific tag in results
  • external:true - Show only external techniques
Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Active filters:

phase: Host Enumeration

Resource Development

0 items

Initial Access

0 items

Reconnaissance

0 items

Host Enumeration

52 items

Database Enumeration

2

Enumerate Database Instances

SQL Server Linked Server Inventory and Validation

File Share Enumeration

3

Network Share Discovery

Sensitive File Discovery

SMB Share Enumeration and Spidering

Local Host Enumeration

32

Account Discovery (Windows Local and Google Cloud Service Accounts)

Attack Surface Reduction Rule Discovery

Browser Information Discovery

Credential Guard Status Discovery

Device Guard

Enumerate AppLocker Policies

Enumerate Connections to Other Systems

Enumerate Local Accounts

Enumerate Security Products

Environment Variable Enumeration

Host Enumeration with LinPEAS

Identify Endpoint Defenses

Installed Software Discovery

Internet Connection Discovery

Local Groups Discovery

Local System Reconnaissance

Log Enumeration

Microsoft Defender Status Discovery

Processes and Services Discovery

Query Logged On Users

Query Registry

SCCM / Software Discovery

Search Internal Documentation

Security Software and Controls Discovery

Session Enumeration

Session Hunting

System Information Discovery

System Language Discovery

System Network Configuration Discovery

System Owner/User Discovery

System Service Discovery

WSUS Client Configuration Enumeration

Local Privilege Escalation

1

Automated Privilege Escalation Enumeration with PEASS-ng

Network Scanning

13

AppLocker Policy Discovery

Host Discovery for Lateral Movement

Internal network port and service scanning via hardware implant

Internal Reconnaissance

Internal Web and Share Reconnaissance

Network Discovery — DHCP Discovery

Network Enumeration

Network Scanning

Network Service Discovery with Bettercap

Remote Service / RPC Information Enumeration

Remote System Discovery

Sniff Network Traffic

SNMP enumeration

Obfuscation

1

Reverse Engineering Application

Persistence

0 items

Privilege Escalation

0 items

Domain Enumeration

0 items

Lateral Movement

0 items

Credentials & User Impersonation

0 items

AD Misconfigurations

0 items

Defense Evasion

0 items

Collection

0 items

Exfiltration

0 items