Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

RTT· red team

RTT · red team

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Search techniques, tools, commands…⌘K

No scenario

No scenario · all techniques in scope

IdleStatus

0Scenarios

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Back to Tools

MailSniper

Credential Harvester

Credentials & User Impersonation

Domain Enumeration

PowerShell toolkit for authorized Microsoft Exchange assessments. Upstream documents self-mailbox search, privileged organization-wide mailbox search over EWS using ApplicationImpersonation, GAL and user discovery, and legacy OWA/EWS password-spray modules. Exchange Online EWS requires OAuth; Microsoft's current schedule begins global EWS disablement in October 2026 and fully disables EWS by April 2027. Check tenant EWS availability and do not assume legacy examples work unchanged in cloud tenants.

Source

https://github.com/dafthack/MailSniper

Language

PowerShell

References

github.com github.com learn.microsoft.com learn.microsoft.com learn.microsoft.com

+6 more

Extended Details

RESTRICTED_ACCESS_BLUR_MARKER