Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

RTT· red team

RTT · red team

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Search techniques, tools, commands…⌘K

No scenario

No scenario · all techniques in scope

IdleStatus

0Scenarios

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Back to Tools

HiddenDesktop

Remote Access Tool

Collection

A Cobalt Strike Beacon Object File (BOF) implementation of a hidden virtual desktop (HVNC) tool. It lets operators interact with a separate Windows desktop on the Beacon host without using the VNC protocol. The initializer creates or opens the desktop and forwards desktop input and output to the operator UI through reverse-port-forwarded connections; it does not launch an application by default. Applications can be started with the documented launcher BOFs or interactively through File Explorer using mouse and keyboard input. The project does not currently support targeting remote processes.

Source

https://github.com/WKL-Sec/HiddenDesktop

Language

References

github.com github.com github.com github.com github.com

+2 more

Extended Details

RESTRICTED_ACCESS_BLUR_MARKER