Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

RTT· red team

RTT · red team

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Search techniques, tools, commands…⌘K

No scenario

No scenario · all techniques in scope

IdleStatus

0Scenarios

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Back to Tools

ResetNightmare

Account Manipulation

AD Misconfigurations

Privilege Escalation

A PowerShell/Rubeus proof of concept and NetExec LDAP module for CVE-2026-27912, a Windows Kerberos Change Password authorization flaw. On an unpatched domain controller, a principal with write access to a controlled account's userPrincipalName (or permission to create an account in an eligible OU) can use the flaw to reset another user or computer account's password without its current password.

Source

https://github.com/Semperis-Community/ResetNightmare

Language

PowerShell / Python

References

github.com github.com github.com github.com cravaterouge.com

+10 more

Extended Details

RESTRICTED_ACCESS_BLUR_MARKER