Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

RTT· red team

RTT · red team

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Search techniques, tools, commands…⌘K

No scenario

No scenario · all techniques in scope

IdleStatus

0Scenarios

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Back to Tools

Nimcrypt2

In-Memory Execution

Resource Development

Defense Evasion

Nim-based packer and loader that generates Windows executables for loading .NET assemblies, PE files, or raw shellcode. The upstream v2.0 project documents direct syscalls, PPID spoofing, ntdll unhooking, sandbox checks, and string encryption among its features; these describe implementation behavior, not guaranteed AV/EDR outcomes.

Source

https://github.com/icyguider/Nimcrypt2

Language

Nim

References

github.com raw.githubusercontent.com raw.githubusercontent.com attack.mitre.org attack.mitre.org

+2 more

Extended Details

RESTRICTED_ACCESS_BLUR_MARKER