https://www.veil-framework.com/component---src-components-page-tem…pages-framework-mdx-5900d12cd1755f96dca1.js

1"use strict";(self.webpackChunkveil_framework=self.webpackChunkveil_framework||[]).push([[4452],{5285:function(e,t,a){a.r(t),a.d(t,{Head:function(){return f},default:function(){return h}});var n=a(8453),r=a(6540);function l(e){const t=Object.assign({h1:"h1",p:"p",h2:"h2",ul:"ul",li:"li",strong:"strong",a:"a"},(0,n.RP)(),e.components);return r.createElement(r.Fragment,null,r.createElement(t.h1,null,"Framework Overview"),"\n",r.createElement(t.p,null,"The Veil Framework is a collection of tools designed for generating payloads, enumerating networks, and testing defensive controls in authorized security assessments. What distinguishes it from a simple script collection is the modular architecture: each component addresses a discrete phase of a penetration test, from initial payload creation through post-exploitation analysis."),"\n",r.createElement(t.p,null,"This page covers the framework's structure, the thinking behind its design, and how teams put it to practical use in controlled environments. You will find guidance on module selection, safe lab setup, and the common misunderstandings that trip up newcomers."),"\n",r.createElement(t.h2,null,"Architecture and Module Structure"),"\n",r.createElement(t.p,null,"At its core, the framework follows a plugin-based architecture. Each module — Evasion, PowerView, Catapult, Pyherion, Pillage — operates independently but shares a common configuration layer and output format. This means you can swap modules in and out depending on the engagement scope without rearchitecting your workflow."),"\n",r.createElement(t.p,null,"The modular approach was a deliberate design choice. Early monolithic tools often coupled payload generation with delivery, making it difficult to isolate which phase was detected by endpoint controls. By separating concerns, each module can be tested and updated on its own cadence."),"\n",r.createElement(t.h2,null,"How Teams Use This in Labs"),"\n",r.createElement(t.p,null,"Security teams typically deploy the framework within isolated virtual networks — think VMware or VirtualBox segments with no route to production infrastructure. A common setup looks like this:"),"\n",r.createElement(t.ul,null,"\n",r.createElement(t.li,null,r.createElement(t.strong,null,"Attack host:")," Kali or Parrot OS running the framework"),"\n",r.createElement(t.li,null,r.createElement(t.strong,null,"Target range:")," Windows Server, Windows 10/11 workstations, sometimes a domain controller"),"\n",r.createElement(t.li,null,r.createElement(t.strong,null,"Monitoring stack:")," Sysmon, Windows Event Forwarding, a SIEM collector, and ideally an EDR agent in audit mode"),"\n"),"\n",r.createElement(t.p,null,"The value is not in the payloads themselves but in the telemetry they produce. When you fire a Veil-generated payload against a monitored target, you learn what your detection stack catches, what it misses, and where your logging has blind spots. That feedback loop is the entire point."),"\n",r.createElement(t.p,null,"Purple teams — where offensive and defensive operators collaborate in real time — have found the framework particularly useful for structured exercises. The offensive side generates payloads with specific characteristics (encoded, obfuscated, staged), and the defensive side tunes rules and signatures against them."),"\n",r.createElement(t.h2,null,"Common Misunderstandings"),"\n",r.createElement(t.p,null,r.createElement(t.strong,null,'"It bypasses all antivirus."')," This has never been accurate. Detection technology evolves continuously — what evades signature-based scanning today may be flagged by behavioral analysis tomorrow. The framework's evasion capabilities are useful for testing whether your specific controls detect specific techniques, not for making universally undetectable binaries."),"\n",r.createElement(t.p,null,r.createElement(t.strong,null,'"It\'s only for red teamers."')," Defensive teams arguably benefit more. If you operate a SOC, understanding how evasion payloads are structured helps you write better detection logic, tune your EDR policies, and communicate risk to stakeholders with concrete examples rather than abstract threat models."),"\n",r.createElement(t.p,null,r.createElement(t.strong,null,'"Running the tool equals a pentest."')," The framework is one component of a much larger methodology. A proper security assessment involves scoping, rules of engagement, systematic testing, evidence collection, and reporting. Simply generating a payload proves nothing on its own."),"\n",r.createElement(t.h2,null,"Ethical and Legal Boundaries"),"\n",r.createElement(t.p,null,"Every use of this framework must occur within environments where you have explicit written authorization. This is not a gray area — unauthorized access to computer systems is a criminal offense in virtually every jurisdiction. Testing against systems you do not own or do not have permission to test is illegal, regardless of your intent."),"\n",r.createElement(t.p,null,"For educational purposes, set up your own lab. Cloud platforms like AWS, Azure, and GCP all offer free-tier resources sufficient for building a basic range. Alternatively, projects like DVWA, Metasploitable, and HackTheBox provide purpose-built targets for practice."),"\n",r.createElement(t.h2,null,"Framework Context"),"\n",r.createElement(t.p,null,"The concept of security testing frameworks has a long history in the industry. For background on how software frameworks in general are structured and why modular architecture matters in security tooling, ",r.createElement(t.a,{href:"https://en.wikipedia.org/wiki/Software_framework"},"Wikipedia's overview of software frameworks")," provides useful context on the design principles at work here."),"\n",r.createElement(t.h2,null,"Where to Go Next"),"\n",r.createElement(t.p,null,"If you are new to the framework, the ",r.createElement(t.a,{href:"/veil-tutorial/"},"Veil Tutorial")," walks through initial setup and your first payload generation in a safe lab. For module-specific documentation, the ",r.createElement(t.a,{href:"/modules/"},"Modules")," hub links to each component's dedicated page. And if you want to understand the detection side, ",r.createElement(t.a,{href:"/framework/veil-evasion/"},"Veil-Evasion")," covers how to think about evasion from a defender's perspective."))}var s=function(e={}){const{wrapper:t}=Object.assign({},(0,n.RP)(),e.components);return t?r.createElement(t,e,r.createElement(l,e)):l(e)},o=a(9329),i=a(1744),c=a(8963),m=a(8752),u=a(7304);function d(e){if(!e)return null;try{return new Intl.DateTimeFormat("en-GB",{day:"numeric",month:"long",year:"numeric",timeZone:"UTC"}).format(new Date(e))}catch{return null}}function p({pageContext:e,children:t}){const{frontmatter:a}=e,n=(null==a?void 0:a.title)||"",l=(null==a?void 0:a.description)||"",s=(null==a?void 0:a.slug)||"",i=(null==a?void 0:a.heroImage)||null,p=(null==a?void 0:a.date)||null,h=(null==a?void 0:a.lastmod)||null,f=d(p),g=h&&h!==p?d(h):null;return r.createElement(o.A,null,i&&r.createElement(c.A,{title:n,subtitle:l,backgroundImage:i}),r.createElement("article",{className:"page-content"},r.createElement("div",{className:"container"},f&&r.createElement("p",{className:"post-meta"},r.createElement("time",{dateTime:p},"Published ",f),g&&r.createElement(r.Fragment,null," · ",r.createElement("time",{dateTime:h}

1,"Updated ",g))),r.createElement("div",{className:"post-layout-grid"},r.createElement("div",{className:"post-main"},t),r.createElement("aside",{className:"post-sidebar","aria-label":"Sidebar"},r.createElement("div",{className:"post-sidebar-scroll"},r.createElement(u.A),r.createElement(m.A,{sourceUrl:s})))))))}function h(e){return r.createElement(p,e,r.createElement(s,e))}function f({pageContext:e}){const{frontmatter:t}=e,a=null!=t&&t.heroImage?`https://www.veil-framework.com${t.heroImage}`:null;return r.createElement(i.A,{title:null==t?void 0:t.title,description:null==t?void 0:t.description,pathname:null==t?void 0:t.slug},(null==t?void 0:t.date)&&r.createElement("meta",{property:"article:published_time",content:t.date}),(null==t?void 0:t.lastmod)&&r.createElement("meta",{property:"article:modified_time",content:t.lastmod}),a&&r.createElement("meta",{property:"og:image",content:a}),a&&r.createElement("meta",{name:"twitter:image",content:a}))}},7304:function(e,t,a){a.d(t,{A:function(){return l}});var n=a(6540);function r({href:e,children:t,className:a,...r}){return n.createElement("a",Object.assign({href:e,target:"_blank",rel:"sponsored nofollow noopener",className:a},r),t)}function l(){const e="/veil-recommends/infosec-fundamentals";return n.createElement("aside",{className:"fc-wrap","aria-label":"Recommended course"},n.createElement("div",{className:"fc-header"},n.createElement("span",{className:"fc-dot fc-dot-r","aria-hidden":"true"}),n.createElement("span",{className:"fc-dot fc-dot-a","aria-hidden":"true"}),n.createElement("span",{className:"fc-dot fc-dot-g","aria-hidden":"true"}),n.createElement("span",{className:"fc-header-label"},"course_spotlight.sh")),n.createElement(r,{href:e,className:"fc-image-link","aria-label":"View Information Security Fundamentals course"},n.createElement("img",{src:"/img/hero/infosec-fundamentals.webp",alt:"Information Security Fundamentals course cover",className:"fc-image",loading:"lazy",width:"300",height:"169"})),n.createElement("div",{className:"fc-body"},n.createElement("div",{className:"fc-tag"},"Recommended Course"),n.createElement("h3",{className:"fc-title"},n.createElement(r,{href:e,className:"fc-title-link"},"Information Security Fundamentals")),n.createElement("p",{className:"fc-desc"},"Build a solid foundation in cybersecurity. Covers network fundamentals, common attack vectors, defensive controls, and the mindset needed for security research."),n.createElement("ul",{className:"fc-features"},n.createElement("li",{className:"fc-feature"},n.createElement("span",{className:"fc-feature-icon","aria-hidden":"true"},"▸"),"Beginner-friendly — no prior experience needed"),n.createElement("li",{className:"fc-feature"},n.createElement("span",{className:"fc-feature-icon","aria-hidden":"true"},"▸"),"Network attacks & defences"),n.createElement("li",{className:"fc-feature"},n.createElement("span",{className:"fc-feature-icon","aria-hidden":"true"},"▸"),"Real-world security concepts")),n.createElement(r,{href:e,className:"fc-cta"},"View Course",n.createElement("span",{className:"fc-cta-arrow","aria-hidden":"true"}," →")),n.createElement("p",{className:"fc-disclosure"},"We may earn a commission if you enrol via our link, at no extra cost to you.")))}},8453:function(e,t,a){a.d(t,{RP:function(){return l}});var n=a(6540);const r=n.createContext({});function l(e){const t=n.useContext(r);return n.useMemo(()=>"function"==typeof e?e(t):{...t,...e},[t,e])}},8752:function(e,t,a){a.d(t,{A:function(){return r}});var n=a(6540);function r({sourceUrl:e}){const{0:t,1:a}=(0,n.useState)("idle"),{0:r,1:l}=(0,n.useState)("");return n.createElement("aside",{className:"nl-sw-wrap","aria-label":"Newsletter signup"},n.createElement("div",{className:"nl-sw-header"},n.createElement("span",{className:"nl-sw-dot nl-sw-dot-r","aria-hidden":"true"}),n.createElement("span",{className:"nl-sw-dot nl-sw-dot-a","aria-hidden":"true"}),n.createElement("span",{className:"nl-sw-dot nl-sw-dot-g","aria-hidden":"true"}),n.createElement("span",{className:"nl-sw-title"},"intel_feed.sh")),n.createElement("div",{className:"nl-sw-body"},n.createElement("p",{className:"nl-sw-prompt"},n.createElement("span",{className:"nl-sw-caret","aria-hidden":"true"},"$")," ","subscribe --to evasion-intel"),n.createElement("h3",{className:"nl-sw-heading"},"Stay ahead of the curve"),n.createElement("p",{className:"nl-sw-desc"},"AV bypass techniques, detection gaps, and lab-tested research — delivered before the mainstream catches up."),"done"===t?n.createElement("div",{className:"nl-sw-success",role:"status"},n.createElement("span",{className:"nl-sw-check","aria-hidden":"true"},"✓"),n.createElement("div",null,n.createElement("strong",null,"Subscribed."),n.createElement("br",null),n.createElement("span",{className:"nl-sw-success-sub"},"Confirm your email to activate."))):n.createElement("form",{onSubmit:async function(e){e.preventDefault();const t=e.currentTarget,n=new FormData(t);

1if(!n.get("company")){a("loading"),l("");try{const e=await fetch("/api/subscribe",{method:"POST",body:n}),r=await e.json();r.success?(a("done"),t.reset()):(a("err"),l(r.error||"Something went wrong."))}catch{a("err"),l("Network error — please try again.")}}},className:"nl-sw-form",noValidate:!0},n.createElement("input",{type:"hidden",name:"site",value:"veil-framework"}),n.createElement("input",{type:"hidden",name:"source_url",value:e||""}),n.createElement("input",{type:"text",name:"company",tabIndex:"-1","aria-hidden":"true",className:"nl-sw-hp",autoComplete:"off"}),n.createElement("label",{htmlFor:"nl-sw-name",className:"nl-sw-label"},"Your name"),n.createElement("input",{id:"nl-sw-name",type:"text",name:"name",placeholder:"alias or handle",required:!0,autoComplete:"given-name",className:"nl-sw-input",disabled:"loading"===t}),n.createElement("label",{htmlFor:"nl-sw-email",className:"nl-sw-label"},"Email address"),n.createElement("input",{id:"nl-sw-email",type:"email",name:"email",placeholder:"[email protected]",required:!0,autoComplete:"email",className:"nl-sw-input",disabled:"loading"===t}),"err"===t&&n.createElement("p",{className:"nl-sw-error",role:"alert"},r),n.createElement("button",{type:"submit",className:"nl-sw-btn",disabled:"loading"===t},"loading"===t?"Connecting…":"Subscribe to intel →"),n.createElement("p",{className:"nl-sw-legal"},"No spam. No vendor fluff. Unsubscribe any time."))))}},8963:function(e,t,a){a.d(t,{A:function(){return r}});var n=a(6540);function r({title:e,subtitle:t,primaryLink:a,primaryText:r,secondaryLink:l,secondaryText:s,backgroundImage:o}){const i=o?{backgroundImage:`linear-gradient(135deg, rgba(37, 99, 235, 0.85) 0%, rgba(13, 33, 55, 0.9) 100%), url(${o})`,backgroundSize:"cover",backgroundPosition:"center"}:{};return n.createElement("section",{className:"hero blueprint-section-subtle",style:i},n.createElement("div",{className:"container"},n.createElement("h1",null,e),t&&n.createElement("p",null,t),(a||l)&&n.createElement("div",{style:{display:"flex",gap:"var(--space-md)",flexWrap:"wrap"}},a&&n.createElement("a",{href:a,className:"btn btn-primary"},r||"Get Started"),l&&n.createElement("a",{href:l,className:"btn btn-outline"},s||"Learn More"))))}}}]);
2//# sourceMappingURL=component---src-components-page-template-jsx-content-file-path-content-pages-framework-mdx-5900d12cd1755f96dca1.js.map