Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

RTT· red team

RTT · red team

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Search techniques, tools, commands…⌘K

No scenario

No scenario · all techniques in scope

IdleStatus

0Scenarios

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Back to Tools

Demiguise

Payload Generator

Resource Development

Demiguise is NCC Group's Python 2 utility for generating an HTML wrapper containing an RC4-encrypted HTA. When the wrapper is opened, its JavaScript decrypts and downloads the HTA through the browser's download APIs; the user must accept browser prompts to run it. The tool supports environmental keying so the payload can fail to decrypt outside the intended environment. Its purpose is to demonstrate HTML/HTA delivery that can evade content and file-type inspection; it does not itself deliver or execute the generated file.

Source

https://github.com/nccgroup/demiguise

Language

Python

References

github.com github.com nccgroup.com github.com attack.mitre.org

+6 more

Extended Details

RESTRICTED_ACCESS_BLUR_MARKER