Offensive Security Engineering

In this lecture we break down specific OSI model components and review a full stack app's network architecture. We also build out a mini "enterprise tier" network topology.

In this lecture we go over the concepts of client/server communications, and bridge those concepts to the fundamentals of C2 communications.

This lecture covers the concept of reverse VPN tunneling and walks through a hands on implementation for configuring this concept.

This lecture walks through the fundamental concepts of system administration in the context of DevOps. We explore tools like Terraform and Saltstack and explain the ideas of Infrastructure as Code and Desired State.

This lecture is a brief overview of what "Red Teaming" is and the purpose and value it provides.

This lecture ties together the Red Team and Infrastructure Operations concepts together.

This is just a quick transitional lecture to overview the Scenarios that will be demonstrated throughout the course.

This lecture is a hands on walk through of setting up a simple C2 server with Terraform and Metasploit to conduct a classic exploitation scenario.

This lecture is a hands on walk through of performing some simple post-exploitation activities with Metasploit as our C2.

This lecture is a hands on walk through for configuring an OpenVPN based drop box scenario. Our drop box will make use of reverse VPN tunneling to give us remote access to an internal target network allowing use to compromise the systems within.

This lecture we continue into the post-exploitation phase of the drop box scenario. This is a hands on walk through involving the configuration and use of the Empire C2 framework.

This lecture covers the PwnDrop tool for hosting C2 implants as a lead into the next lecture where we will use it to serve Merlin C2 framework agents.

Using the PwnDrop tool to host a Merlin C2 agent to establish a post-exploitation presence on a compromised Windows host.