https://www.veil-framework.com/commons-377f301ce125cc074c01.js

1"use strict";(self.webpackChunkveil_framework=self.webpackChunkveil_framework||[]).push([[4223],{1744:function(e,t,a){a.d(t,{A:function(){return r}});var i=a(6540);function r({title:e,description:t,pathname:a,children:r}){const n="https://www.veil-framework.com",o="Veil Framework",s={title:e?`${e} | ${o}`:o,description:t||"Cybersecurity education and tooling knowledge hub for the Veil Framework — evasion testing, payload analysis, and defensive security research.",url:`${n}${a||"/"}`};return i.createElement(i.Fragment,null,i.createElement("title",null,s.title),i.createElement("meta",{name:"description",content:s.description}),i.createElement("link",{rel:"canonical",href:s.url}),i.createElement("meta",{property:"og:type",content:"website"}),i.createElement("meta",{property:"og:title",content:s.title}),i.createElement("meta",{property:"og:description",content:s.description}),i.createElement("meta",{property:"og:url",content:s.url}),i.createElement("meta",{property:"og:site_name",content:o}),i.createElement("meta",{property:"og:image",content:`${n}/img/hero/home-1600x900.jpg`}),i.createElement("meta",{name:"twitter:card",content:"summary_large_image"}),i.createElement("meta",{name:"twitter:title",content:s.title}),i.createElement("meta",{name:"twitter:description",content:s.description}),i.createElement("meta",{name:"twitter:image",content:`${n}/img/hero/home-1600x900.jpg`}),i.createElement("link",{rel:"icon",href:"/favicon.ico"}),i.createElement("link",{rel:"icon",type:"image/png",sizes:"32x32",href:"/img/favicon-32x32.png"}),i.createElement("link",{rel:"apple-touch-icon",href:"/img/apple-touch-icon.png"}),r)}},9329:function(e,t,a){a.d(t,{A:function(){return c}});var i=a(4506),r=a(6540),n=a(4810),o=JSON.parse('[{"title":"AI Hype vs Reality: The State of AI-Driven Malware in 2026","path":"/ai-hype-vs-reality-the-state-of-ai-driven-malware-in-2026/","keywords":"ai hype vs reality: the state of ai-driven malware in 2026 research-notes veil framework defensive security threat detection red team research cut through the hype to understand what ai-driven malware actually looks like in 2026 — real capabilities, practical limitations, and what defenders should actually prioritize."},{"title":"Automating Payload Delivery with Veil-Catapult: Multi-Stage Pipelines","path":"/automating-payload-delivery-with-veil-catapult-multi-stage-pipelines/","keywords":"automating payload delivery with veil-catapult: multi-stage pipelines veil-catapult veil framework defensive security threat detection red team research master veil-catapult\'s multi-stage payload delivery automation for lab environments, understand the detection surfaces each delivery mechanism creates, and build monitoring for delivery chain activity."},{"title":"BYOVD (Bring Your Own Vulnerable Driver): The Latest EDR-Killer Strategy","path":"/byovd-bring-your-own-vulnerable-driver-the-latest-edr-killer-strategy/","keywords":"byovd (bring your own vulnerable driver): the latest edr-killer strategy research-notes veil framework defensive security threat detection red team research examine how attackers exploit legitimately signed but vulnerable kernel drivers to disable edr products, and learn detection strategies for byovd attacks in enterprise environments."},{"title":"Blue Team Monitoring: Detecting Veil Framework Activity in Logs","path":"/blue-team-monitoring-detecting-veil-framework-activity-in-logs/","keywords":"blue team monitoring: detecting veil framework activity in logs research-notes veil framework defensive security threat detection red team research practical guide for blue teams on detecting veil framework payload generation, delivery, and execution through log analysis, siem rules, and endpoint telemetry correlation."},{"title":"Catapult","path":"/catapult/","keywords":"catapult   veil-catapult module documentation — payload delivery and deployment automation for lab environments, detection of delivery mechanisms, and safe testing practices."},{"title":"Chaos Encryption: Next-Generation Shellcode Obfuscation to Bypass AV","path":"/chaos-encryption-next-generation-shellcode-obfuscation-to-bypass-av/","keywords":"chaos encryption: next-generation shellcode obfuscation to bypass av research-notes veil framework defensive security threat detection red team research explore chaos-based encryption algorithms for shellcode obfuscation, understand why they challenge traditional av detection, and learn practical strategies for building resilient detections."},{"title":"Detecting Cobalt Strike Beacon Activity with Veil","path":"/use-cobalt-strikes-beacon-veil/","keywords":"detecting cobalt strike beacon activity with veil   telemetry analysis and detection strategies for cobalt strike beacon-style command-and-control activity — network indicators, endpoint telemetry, and hunting techniques."},{"title":"Defensive Lab Guide: Safely Analyzing Veil Payloads in a Sandbox","path":"/defensive-lab-guide-safely-analyzing-veil-payloads-in-a-sandbox/","keywords":"defensive lab guide: safely analyzing veil payloads in a sandbox research-notes veil framework defensive security threat detection red team research step-by-step guid

1ance for building an isolated analysis lab to safely detonate, analyze, and extract detection signatures from veil framework payloads without risk to production environments."},{"title":"DEP and PyInstaller","path":"/dep-pyinstaller/","keywords":"dep and pyinstaller   how data execution prevention interacts with pyinstaller-packaged payloads — technical details for both offense and defense, and what this means for detection engineering."},{"title":"Fileless Malware Surge: 2026 Trends in Memory-Only Attacks","path":"/fileless-malware-surge-2026-trends-in-memory-only-attacks/","keywords":"fileless malware surge: 2026 trends in memory-only attacks research-notes veil framework defensive security threat detection red team research understand the 2026 surge in fileless and memory-only malware techniques, learn where defenders can detect them, and implement practical monitoring to catch threats that never touch disk."},{"title":"The Future of AV Evasion: Predictions and Emerging Trends for 2027","path":"/the-future-of-av-evasion-predictions-and-emerging-trends-for-2027/","keywords":"the future of av evasion: predictions and emerging trends for 2027 research-notes veil framework defensive security threat detection red team research forward-looking analysis of where av evasion techniques are heading in 2027, with strategic guid

1ance for defenders preparing to meet evolving threats with resilient detection architectures."},{"title":"Guides & Videos","path":"/guidesvideos/","keywords":"guides & videos   a curated collection of guides, tutorials, and walkthroughs for the veil framework — from beginner setup to advanced module usage."},{"title":"Honor Amongst Thieves: Building Trust in Veil-Evasion Payloads","path":"/honor-amongst-thieves-building-trust-in-veil-evasion-payloads/","keywords":"honor amongst thieves: building trust in veil-evasion payloads   trust, integrity, and supply-chain safety in security tooling — code signing, hash verification, and nist frameworks for building confidence in the tools you use."},{"title":"Hunting Sensitive Data with Veil Framework","path":"/hunting-sensitive-data-veil-framework/","keywords":"hunting sensitive data with veil framework   detection strategies and telemetry for identifying data discovery and potential exfiltration activity in enterprise environments using veil framework techniques."},{"title":"Hunting Users with Veil Framework","path":"/hunting-users-veil-framework/","keywords":"hunting users with veil framework   detecting user enumeration and privilege reconnaissance in enterprise active directory environments — telemetry sources, detection rules, and hunting methodologies."},{"title":"Living-Off-The-Cloud: How Attackers Abuse Cloud APIs for Stealthy C2","path":"/living-off-the-cloud-how-attackers-abuse-cloud-apis-for-stealthy-c2/","keywords":"living-off-the-cloud: how attackers abuse cloud apis for stealthy c2 research-notes veil framework defensive security threat detection red team research understand how threat actors leverage legitimate cloud service apis for command-and-control communications, and learn detection strategies to identify cloud-based c2 channels."},{"title":"Living Off the Land Binaries (LOLBAS) in 2026: Techniques and Detection","path":"/living-off-the-land-binaries-lolbas-in-2026-techniques-and-detection/","keywords":"living off the land binaries (lolbas) in 2026: techniques and detection research-notes veil framework defensive security threat detection red team research comprehensive analysis of lolbas techniques trending in 2026, with detection strategies for defenders monitoring abuse of legitimate windows binaries in enterprise environments."},{"title":"Phishing 2.0: MFA Bypass and the Rise of Phishing-as-a-Service","path":"/phishing-2-0-mfa-bypass-and-the-rise-of-phishing-as-a-service/","keywords":"phishing 2.0: mfa bypass and the rise of phishing-as-a-service research-notes veil framework defensive security threat detection red team research analyze how modern phishing operations bypass multi-factor authentication using real-time proxy frameworks and phaas platforms, with actionable detection and hardening strategies."},{"title":"PowerShell Best Practices: Reducing Attack Surface Against Advanced Payloads","path":"/powershell-best-practices-reducing-attack-surface-against-advanced-payloads/","keywords":"powershell best practices: reducing attack surface against advanced payloads research-notes veil framework defensive security threat detection red team research practical powershell hardening guidance for enterprise environments — logging, constrained language mode, amsi, and configuration strategies that reduce exposure to advanced payload delivery."},{"title":"PowerShell Payloads in Security Testing","path":"/powershell-payloads/","keywords":"powershell payloads in security testing   powershell payload considerations for security testing — execution policies, constrained language mode, script block logging, amsi, and defensive recommendations for organizations."},{"title":"PrependMigrate in Veil","path":"/prependmigrate-veil/","keywords":"prependmigrate in veil   understanding the prependmigrate technique — process migration patterns, how defenders detect it, and recommendations for monitoring and response."},{"title":"Why Process Injection (T1055) Dominates 2026 Attack Trends","path":"/why-process-injection-t1055-dominates-2026-attack-trends/","keywords":"why process injection (t1055) dominates 2026 attack trends research-notes veil framework defensive security threat detection red team research examine why mitre att&ck t1055 process injection remains the most prevalent evasion technique in 2026, with practical detection strategies and hardening guidance for defenders."},{"title":"Pyherion","path":"/pyherion/","keywords":"pyherion   pyherion module documentation — python payload obfuscation and crypter capabilities, detection of obfuscated python scripts, and defensive analysis techniques."}

1,{"title":"Root CA Abuse: The New Stealth Evasion Technique of 2025–26","path":"/root-ca-abuse-the-new-stealth-evasion-technique-of-2025-26/","keywords":"root ca abuse: the new stealth evasion technique of 2025–26 research-notes veil framework defensive security threat detection red team research learn how attackers install rogue root certificates to intercept encrypted traffic and sign malicious code, and discover practical detection and hardening measures for certificate trust stores."},{"title":"How to Safely Check Veil Payloads Against VirusTotal","path":"/how-to-safely-check-veil-payloads-against-virustotal/","keywords":"how to safely check veil payloads against virustotal   safe practices for evaluating veil-generated payload detection rates using virustotal — isolated analysis, operational considerations, and responsible handling guidance."},{"title":"Self-Aware Malware: Outsmarting Sandboxes with Human-Like Behavior","path":"/self-aware-malware-outsmarting-sandboxes-with-human-like-behavior/","keywords":"self-aware malware: outsmarting sandboxes with human-like behavior research-notes veil framework defensive security threat detection red team research how modern malware detects sandbox environments through behavioral analysis and human interaction checks, and what defenders can do to improve sandbox fidelity in 2026."}

1,{"title":"Mastering Veil-PowerView: Active Directory Reconnaissance Techniques 2026","path":"/mastering-veil-powerview-active-directory-reconnaissance-techniques-2026/","keywords":"mastering veil-powerview: active directory reconnaissance techniques 2026 veil-powerview veil framework defensive security threat detection red team research deep dive into veil-powerview\'s active directory reconnaissance capabilities for 2026, with detection strategies and hardening guidance for defenders securing ad environments."},{"title":"Supply Chain Security for Pentesters: SBOMs and Code Signing Post-OWASP 2025","path":"/supply-chain-security-for-pentesters-sboms-and-code-signing-post-owasp-2025/","keywords":"supply chain security for pentesters: sboms and code signing post-owasp 2025 research-notes veil framework defensive security threat detection red team research understand how sboms and code signing reshape the pentester\'s approach to supply chain security, with practical assessment techniques and defensive recommendations for the post-owasp 2025 landscape."},{"title":"Unleashing Pyherion: Modern Python Obfuscation for Red Teams (2026)","path":"/unleashing-pyherion-modern-python-obfuscation-for-red-teams-2026/","keywords":"unleashing pyherion: modern python obfuscation for red teams (2026) pyherion veil framework defensive security threat detection red team research explore pyherion\'s python obfuscation techniques for red team operations in 2026, with defensive analysis strategies and detection guidance for security teams encountering obfuscated python threats."},{"title":"Veil-Evasion Cortana Integration","path":"/veil-evasion-cortana-integration/","keywords":"veil-evasion cortana integration   using cobalt strike\'s cortana scripting engine to automate veil-evasion payload generation and integrate it into red team workflows."},{"title":"PowerView Usage Guide","path":"/veil-powerview-usage-guide/","keywords":"powerview usage guide   practical usage guide for veil-powerview — active directory enumeration techniques, command reference, and defensive monitoring recommendations."},{"title":"Veil Tutorial","path":"/veil-tutorial/","keywords":"veil tutorial   step-by-step tutorial for getting started with the veil framework — lab setup, first payload generation, monitoring configuration, and interpreting results defensively."},{"title":"When Malware Goes Physical: IP-KVM and Hardware-Based Evasion","path":"/when-malware-goes-physical-ip-kvm-and-hardware-based-evasion/","keywords":"when malware goes physical: ip-kvm and hardware-based evasion research-notes veil framework defensive security threat detection red team research explore how attackers use ip-kvm devices and hardware implants to bypass software-based security controls, and learn practical strategies for detecting physical-layer threats."},{"title":"Veil-Pillage: Harvesting Credentials and Lateral Movement Techniques","path":"/veil-pillage-harvesting-credentials-and-lateral-movement-techniques/","keywords":"veil-pillage: harvesting credentials and lateral movement techniques veil-pillage veil framework defensive security threat detection red team research deep analysis of veil-pillage credential harvesting and lateral movement capabilities, with comprehensive detection strategies and hardening guidance for enterprise defenders."},{"title":"Veil-PowerView","path":"/veil-powerview/","keywords":"veil-powerview   veil-powerview module overview — active directory enumeration and situational awareness for authorized security assessments and defensive monitoring."},{"title":"Command-Line Usage","path":"/veil-command-line-usage/","keywords":"command-line usage   complete command-line reference for the veil framework — cli flags, module selection, output options, and scripted usage for automated security testing."}]');const s=[{title:"Home",path:"/",keywords:"veil framework home start"},{title:"Framework Overview",path:"/framework/",keywords:"framework overview architecture modules evasion"},{title:"Veil-Evasion",path:"/framework/veil-evasion/",keywords:"evasion payload generation av bypass detection"},{title:"Veil-PowerView",path:"/framework/veil-powerview/",keywords:"powerview active directory enumeration recon"},{title:"Modules",path:"/modules/",keywords:"modules evasion powerview catapult pyherion pillage"},{title:"Guides",path:"/guides/",keywords:"guides tutorials howto walkthrough"},{title:"Veil Tutorial",path:"/veil-tutorial/",keywords:"tutorial getting started walkthrough beginner"},{title:"Command-Line Usage",path:"/veil-command-line-usage/",keywords:"cli command line options flags arguments"},{title:"PowerShell Payloads",path:"/powershell-payloads/",keywords:"powershell payloads scripting execution policy"},{title:"PowerView Usage Guide",path:"/veil-powerview-usage-guide/",keywords:"powerview usage guide active directory"},{title:"Safely Check Payloads Against VirusTotal",path:"/how-to-safely-check-veil-payloads-against-virustotal/",keywords:"virustotal malware analysis safe check scanning"},{title:"Trust in Evasion Payloads",path:"/honor-amongst-thieves-building-trust-in-veil-evasion-payloads/",keywords:"trust integrity signing supply chain"},{title:"Hunting Sensitive Data",path:"/hunting-sensitive-data-veil-framework/",keywords:"hunting sensitive data exfiltration detection"},{title:"Hunting Users",path:"/hunting-users-veil-framework/",keywords:"hunting users enumeration active directory"},{title:"Cobalt Strike Beacon Detection",path:"/use-cobalt-strikes-beacon-veil/",keywords:"cobalt strike beacon detection telemetry"},{title:"DEP & PyInstaller",path:"/dep-pyinstaller/",keywords:"dep pyinstaller data execution prevention packaging"},{title:"PrependMigrate",path:"/prependmigrate-veil/",keywords:"prependmigrate migration payload technique"},{title:"Catapult",path:"/catapult/",keywords:"catapult delivery deployment module"},{title:"Pyherion",path:"/pyherion/",keywords:"pyherion python obfuscation crypter"},{title:"V-Day Release",path:"/v-day/",keywords:"vday release version launch announcement"},{title:"May 15th V-Day Release",path:"/may-15th-v-day-release/",keywords:"may release vday version"},{title:"May V-Day Announcement",path:"/on-your-mark-get-set-go-may-v-day/",keywords:"may vday announcement release"},{title:"Version 2.2.0 Release",path:"/veil-framework-2-2-0-release/",keywords:"version 2.2.0 release notes changelog"},{title:"Veil 3.0 Release",path:"/veil-3-0-release/",keywords:"veil 3.0 release notes major version"},{title:"Year of V-Days",path:"/year-v-days/",keywords:"year vdays releases timeline history"},{title:"Changelog",path:"/changelog/",keywords:"changelog releases history versions updates"},{title:"About",path:"/about/",keywords:"about team project history mission"},{title:"Contact",path:"/contact/",keywords:"contact email reach support"},{title:"Privacy Policy",path:"/privacy/",keywords:"privacy policy data"},{title:"Terms of Use",path:"/terms/",keywords:"terms conditions use legal"},{title:"Guides & Videos",path:"/guidesvideos/",keywords:"guides videos tutorials walkthroughs"},{title:"Veil-PowerView Module",path:"/veil-powerview/",keywords:"powerview module active directory"},{title:"Veil-PowerView Category",path:"/category/veil-powerview/",keywords:"category powerview articles"},{title:"Veil-Pillage Category",path:"/category/veil-pillage/",keywords:"category pillage post-exploitation"},{title:"Veil-Catapult Category",path:"/category/veil-catapult/",keywords:"category catapult delivery"}].concat((0,i.A)(o));function l({isOpen:e,onClose:t}){const{0:a,1:i}=(0,r.useState)(""),o=(0,r.useRef)(null);(0,r.useEffect)(()=>{e&&o.current&&o.current.focus(),e||i("")},[e]);const l=(0,r.useCallback)(e=>{"Escape"===e.key&&t()},[t]);if((0,r.useEffect)(()=>

1{if(e)return document.addEventListener("keydown",l),()=>document.removeEventListener("keydown",l)},[e,l]),!e)return null;const c=a.toLowerCase().trim(),d=c.length>1?s.filter(e=>e.title.toLowerCase().includes(c)||e.keywords.toLowerCase().includes(c)||e.path.toLowerCase().includes(c)).slice(0,10):[];return r.createElement("div",{className:"search-overlay",onClick:e=>{e.target===e.currentTarget&&t()},role:"dialog","aria-label":"Site search"},r.createElement("div",{className:"search-modal"},r.createElement("input",{ref:o,type:"search",placeholder:"Search pages, modules, guides…",value:a,onChange:e=>i(e.target.value),"aria-label":"Search the site"}),r.createElement("div",{className:"search-results"},c.length>1&&0===d.length&&r.createElement("p",{style:{padding:"1rem 0",color:"var(--veil-text-muted)"}},"No results found."),d.map(e=>r.createElement(n.N_,{key:e.path,to:e.path,className:"search-result-item",onClick:t},r.createElement("div",{className:"search-result-title"},e.title),r.createElement("div",{className:"search-result-path"},e.path))))))}function c({children:e}){const{0:t,1:a}=(0,r.useState)(!1),{0:i,1:o}=(0,r.useState)(!1);return(0,r.useEffect)(()=>{const e=e=>{(e.ctrlKey||e.metaKey)&&"k"===e.key&&(e.preventDefault(),o(e=>!e))};return document.addEventListener("keydown",e),()=>document.removeEventListener("keydown",e)},[]),r.createElement(r.Fragment,null,r.createElement("a",{href:"#main-content",className:"skip-link"},"Skip to main content"),r.createElement("nav",{className:"site-nav",role:"navigation","aria-label":"Main navigation"},r.createElement("div",{className:"container"},r.createElement(n.N_,{to:"/",className:"nav-logo","aria-label":"Veil Framework home"},"VEIL",r.createElement("span",null,"/"),"FRAMEWORK"),r.createElement("ul",{className:"nav-links"},r.createElement("li",null,r.createElement(n.N_,{to:"/framework/"},"Framework")),r.createElement("li",null,r.createElement(n.N_,{to:"/guides/"},"Guides")),r.createElement("li",null,r.createElement(n.N_,{to:"/modules/"},"Modules")),r.createElement("li",null,r.createElement(n.N_,{to:"/changelog/"},"Release Notes")),r.createElement("li",null,r.createElement(n.N_,{to:"/about/"},"About"))),r.createElement("div",{className:"nav-search"},r.createElement("span",{className:"nav-search-icon","aria-hidden":"true"},"⌕"),r.createElement("input",{type:"search",placeholder:"Search… (Ctrl+K)","aria-label":"Search",onFocus:()=>o(!0),readOnly:!0})),r.createElement("button",{className:"nav-toggle",onClick:()=>a(!t),"aria-label":"Toggle navigation menu","aria-expanded":t},r.createElement("span",null),r.createElement("span",null),r.createElement("span",null)))),r.createElement("div",{className:"mobile-nav "+(t?"open":"")},r.createElement(n.N_,{to:"/framework/",onClick:()=>a(!1)},"Framework"),r.createElement(n.N_,{to:"/guides/",onClick:()=>a(!1)},"Guides"),r.createElement(n.N_,{to:"/modules/",onClick:()=>a(!1)},"Modules"),r.createElement(n.N_,{to:"/changelog/",onClick:()=>a(!1)},"Release Notes"),r.createElement(n.N_,{to:"/about/",onClick:()=>a(!1)},"About")),r.createElement(l,{isOpen:i,onClose:()=>o(!1)}),r.createElement("main",{id:"main-content"},e),r.createElement("footer",{className:"site-footer"},r.createElement("div",{className:"container"},r.createElement("div",{className:"footer-grid"},r.createElement("div",null,r.createElement("div",{className:"footer-brand"},"VEIL/FRAMEWORK"),r.createElement("p",null,"Cybersecurity education and tooling knowledge hub. Defensive framing for penetration-testing research and safe lab practice.")),r.createElement("div",null,r.createElement("h4",{style:{color:"#fff",marginTop:0}},"Navigation"),r.createElement("ul",{className:"footer-links"},r.createElement("li",null,r.createElement(n.N_,{to:"/framework/"},"Framework")),r.createElement("li",null,r.createElement(n.N_,{to:"/guides/"},"Guides")),r.createElement("li",null,r.createElement(n.N_,{to:"/modules/"},"Modules")),r.createElement("li",null,r.createElement(n.N_,{to:"/changelog/"},"Release Notes")))),r.createElement("div",null,r.createElement("h4",{style:{color:"#fff",marginTop:0}},"Legal"),r.createElement("ul",{className:"footer-links"},r.createElement("li",null,r.createElement(n.N_,{to:"/about/"},"About")),r.createElement("li",null,r.createElement(n.N_,{to:"/privacy/"},"Privacy")),r.createElement("li",null,r.createElement(n.N_,{to:"/terms/"},"Terms")),r.createElement("li",null,r.createElement(n.N_,{to:"/contact/"},"Contact"))))),r.createElement("div",{className:"footer-copy"},"© ",(new Date).getFullYear()," Veil Framework. All rights reserved."))))}}}]);
2//# sourceMappingURL=commons-377f301ce125cc074c01.js.map