Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

RTT· red team

RTT · red team

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Search techniques, tools, commands…⌘K

No scenario

No scenario · all techniques in scope

IdleStatus

0Scenarios

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Back to Tools

SharpHound

Noise: RESTRICTED_ACCESS_BLUR_MARKER

AD Enumeration

Domain Enumeration

SharpHound Community Edition (SharpHound CE) is the C# collector for BloodHound CE. It queries Active Directory over LDAP to gather directory objects and relationships including memberships, trusts, ACLs, Group Policy links, and Active Directory site, site-server, and subnet data with related ACLs. Default or selected computer methods also attempt session and local-group collection from domain-joined Windows systems. It writes JSON files and, by default, a ZIP archive; coverage depends on collection methods, permissions, and reachable systems.

Source

https://github.com/SpecterOps/SharpHound

Language

References

github.com github.com bloodhound.specterops.io bloodhound.specterops.io bloodhound.specterops.io

+17 more

Extended Details

RESTRICTED_ACCESS_BLUR_MARKER