Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

RTT· red team

RTT · red team

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Search techniques, tools, commands…⌘K

No scenario

No scenario · all techniques in scope

IdleStatus

0Scenarios

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Back to Tools

AWX

Noise: RESTRICTED_ACCESS_BLUR_MARKER

Remote Execution

Lateral Movement

AWX is an open-source web interface, REST API, and task engine built on Ansible. Authorized users can launch job templates and manage inventories; jobs can execute automation on configured managed nodes. An adversary with suitable AWX access may abuse this centralized management capability for remote execution and lateral movement. Effects depend on the user's RBAC permissions, selected template, credentials, inventory, and connection plugin. MITRE ATT&CK T1072 is applicable when AWX is abused as an enterprise software/configuration management system.

Source

https://github.com/ansible/awx

Language

Python

References

github.com github.com github.com docs.ansible.com docs.ansible.com

+5 more

Extended Details

RESTRICTED_ACCESS_BLUR_MARKER