Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

RTT· red team

RTT · red team

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Search techniques, tools, commands…⌘K

No scenario

No scenario · all techniques in scope

IdleStatus

0Scenarios

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Back to Tools

GitHub Pages

Phishing Framework

Initial Access

GitHub Pages is a static-site hosting service that publishes repository files under a github.io URL or configured custom domain. Threat actors have abused user-controlled Pages sites to host phishing pages and direct users to malicious downloads. HTML smuggling is a separate browser-side delivery technique that can use JavaScript Blob APIs or HTML5 download behavior to construct files after an untrusted page is opened; hosting on Pages alone does not establish that smuggling occurred or that a payload executed.

Source

https://docs.github.com/en/pages/getting-started-with-github-pages/creating-a-github-pages-site

Language

HTML/JavaScript

References

docs.github.com cyjax.com attack.mitre.org microsoft.com curl.se

Extended Details

RESTRICTED_ACCESS_BLUR_MARKER