Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

RTT· red team

RTT · red team

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Search techniques, tools, commands…⌘K

No scenario

No scenario · all techniques in scope

IdleStatus

0Scenarios

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Back to Tools

cscript.exe

LOLBin Abuse

Defense Evasion

Microsoft Windows Script Host's command-line script host. It runs Windows script files such as .vbs, .js, and .wsf using available WSH engines including VBScript and JScript, and scripts can use COM objects. Adversaries can abuse script interpreters for execution, but cscript.exe is a general-purpose host rather than a specific offensive procedure. VBScript is deprecated and its availability is release-dependent; Windows Server 2025 provides it as a preinstalled Feature on Demand, and Microsoft says it will be removed in a later Windows release.

Source

https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/cscript

Language

VBScript/JScript

References

learn.microsoft.com learn.microsoft.com learn.microsoft.com learn.microsoft.com learn.microsoft.com

+5 more

Extended Details

RESTRICTED_ACCESS_BLUR_MARKER