domains / families / security / offensive-initial-access

offensive-initial-access

separate

A checklist of modern initial access techniques for red team engagements, mapping to MITRE ATT&CK TA0001. It covers methods such as phishing, credential stuffing, exposed service exploitation, and supply chain attacks.

When to use

• phishing
• spear phishing
• credential stuffing
• exposed service exploitation
• supply chain attacks
• watering hole
• VPN/RDP brute force
• public-facing application exploitation

Skill page

Source