The Complete Course of Red Team 2025

Open-source intelligence (osint) gathers publicly available data for cybersecurity threat investigation, moving from source identification to harvesting, processing, analysis, and reporting across social media, web, imagery, and geospatial sources.

Explore active reconnaissance techniques used by red teams and penetration testers to identify vulnerabilities and attack vectors, including port and network scanning, vulnerability scanning, and OSINT methods.

Profile an organization's business operations and IT security posture to identify key attack vectors. Footprint external infrastructure using scans, DNS data, and search engines, distinguishing passive and active footprints.

Master open source intelligence and active reconnaissance through quiz questions. Learn how target profiling and thorough information gathering enable realistic red team engagements.

Explore the CIA triad of confidentiality, integrity, and availability and learn how security controls (technical, procedural, or physical) mitigate risks, while assessing risks and training staff on cybersecurity.

Develop hands-on phishing practice using z fisher to simulate phishing, clone pages, and collect credentials, covering deceptive, spear, whaling, palming, smishing, vishing, and snowshoeing.

Explore how pretexting and impersonation in red teaming use deception to gain unauthorized access, employing emotional manipulation, exploiting trust, false information, and urgency.

Explore physical social engineering, also known as physical pretexting or tailgating, and learn techniques such as physical phishing (shoulder surfing), piggybacking, baiting, and physical impersonation.

Explore psychological principles and manipulation techniques used in red teaming to exploit human vulnerabilities, including reciprocity, social proof, liking, authority, scarcity, and fear, while emphasizing ethical, authorized social engineering.

Master the core social engineering concepts through a quiz covering phishing, pretexting, and in-person physical access, and learn how psychological principles enable effective manipulation and defense.

Explore various forms of social engineering, including phishing, pretexting, impersonation, and physical tactics, and learn how understanding psychology and user education counteracts unauthorized access.

Participate in hands-on vulnerability assessment, covering network scanning, vulnerability scanning, and web application scanning. Use Nmap and Wireshark to identify misconfigurations and weaknesses in a red-teaming workflow.

Discover vulnerability scanning tools like Nessus, OpenVAS, Rapid7, Nmap, and OWASP ZAP, with hands-on installation and web application scanning using Burp Suite.

This hands-on lecture introduces web application scanning with popular scanners like burp suite, owasp zap, accutronics, netsparker, and w3af, covering installation, proxy setup, and burp suite features.

Explore how red teams exploit misconfigurations and weaknesses to test security and bypass controls. Identify common issues like default credentials, insecure networks, vulnerable software, and misconfigured permissions to strengthen defenses.

This quiz and assignment lecture covers network scanning to identify entry points. It explains vulnerability scanning tools and web application scanning for misconfigurations, with tryhackme labs for identification and mitigation.

Identify, classify, and remediate vulnerabilities to protect against cyber attacks through a systematic vulnerability management approach that automates detection with scanning tools and prioritizes patches by severity.

Learn how red teams exploit network vulnerabilities to test security, covering issues like unpatched systems, weak passwords, and misconfigurations, plus techniques such as network scanning and penetration testing.

Master exploiting web application vulnerabilities and testing security posture using OWASP top ten, including SQL injection, broken access control, and misconfigurations, guided by ethical red team methods and transparent practices.

Explore post-exploitation techniques used by red teams to maintain access, escalate privileges, gather data, and cover tracks, including backdoors, credential theft, C2, RATs, and data exfiltration.

Explore password attack techniques such as brute force, dictionary, rainbow table, credential stuffing, and social engineering. See hands-on steps for building word lists with crunch and differentiating cracking from guessing.

Identify vulnerabilities specific to web applications and master post-exploitation goals of maintaining access and escalating privileges, including recognizing brute force as a password attack method.

Protect networks from unauthorized access, modification, or denial of service. Deploy firewalls, intrusion detection systems, intrusion prevention systems, network segmentation, ACLs, and clearly defined security policies; regularly test controls.

Explore password cracking methods including brute force, dictionary, rainbow table attacks, and social engineering, phishing, keylogger, credential stuffing, and password spraying, while emphasizing ethical red team practice.

Compare dictionary and brute force attacks, then demonstrate cracking hashes with word lists and brute-force methods using hashcat on tryhackme examples.

Explore password hashes and salting, turning passwords into one-way hashes with unique salts for secure authentication; cover MD5, SHA-1, SHA-256, and crypt and rainbow table defenses.

Take a four-question quiz on password cracking, covering brute force, salting, and dictionary attacks, and identify common web vulnerabilities like cross-site scripting and SQL injection.

Protect applications from vulnerabilities with robust application security and input validation. Integrate secure coding, enforce access control, and regularly test within the software development life cycle; share threat intelligence.

Explore common web application vulnerabilities, including SQL injection, cross-site scripting, broken access control, and broken authentication, and learn defenses such as secure coding, vulnerability management, and incident response planning.

Explore cross-site scripting (XSS) through hands-on practice, distinguishing reflected, stored, and DOM-based XSS, and perform practical payload exercises on TryHackMe to understand vulnerabilities and defenses.

Explore sql injection as a web app vulnerability that lets attackers manipulate queries to access usernames and passwords, including invalid, out-of-band, and blind techniques, with red-teaming ethics and defense benefits.

Engage in a quiz covering cross-site scripting, SQL injection, rogue access points, and securing web applications by identifying vulnerabilities and selecting correct defenses.

Summarize incident response as identifying, containing, eradicating, and recovering from cybersecurity incidents, guided by a plan with roles, evidence collection, root cause analysis, and regular testing and threat intelligence sharing.

Explore wifi encryption and attacks, from WEP to WPA3, with a hands-on TryHackMe lab covering eavesdropping, spoofing, rogue access points, and man-in-the-middle attacks.

Rogue access points are unauthorized wireless networks, intentional or unintentional, that intercept data and enable man-in-the-middle attacks; detect and prevent them with network monitoring, wireless intrusion detection system, and policies.

Learn how the man-in-the-middle attack positions itself between client and server, intercepting and relaying communications to steal data, inject malware, or redirect users to malicious sites.

Master wireless network security by answering quiz questions on man-in-the-middle attacks in Wi-Fi networks, rogue access points, physical security assessments, site surveys, and TryHackMe labs.

Develop, implement, and test robust BCDR plans that identify and prioritize critical processes, include risk assessments, data backups, system restoration, and clear communication with stakeholders during disruptions.

Identify physical vulnerabilities and evaluate the threat landscape through site surveys and assessments. Develop comprehensive, compliant security plans addressing perimeter, access control, surveillance, and incident response.

Tailgating and piggybacking enable unauthorized access to restricted areas; apply controlled access, biometric authentication, security awareness training, and surveillance to reduce these risks.

Explore physical access control systems (pacs) within physical security assessments to identify vulnerabilities, ensure compliance, and optimize integration with surveillance, alarms, and maintenance practices.

Explore physical access control effectiveness, understand tailgating, and identify wireless network vulnerabilities through wireless penetration testing and security assessments.

Navigate cybersecurity law and ethics to guide responsible practices and stay compliant with evolving regulations. Develop a code of ethics, consult legal counsel, and consider ethical implications to avoid harm.

Learn post-exploitation and persistence through hands-on privilege escalation, maintaining access, and lateral movement techniques in a TryHackMe room, with enumeration and vertical vs horizontal escalation.

Develop persistence in ethical hacking and penetration testing by leveraging back doors, web shells, implanted agents, rootkits, and session cookies to maintain authorized access for ongoing analysis.

Understand how attackers move laterally after discovery, using credential dumping, remote services, and pass the hash, and learn defenses like least privilege, segmentation, patches, and monitoring.

Learn core post-exploitation concepts through a quiz on privilege escalation, maintaining access, lateral movement, and threat intelligence for informed decision making, and complete a TryHackMe lab on post-exploitation and persistence.

Explore diverse cybersecurity career opportunities as the field grows. Discover specializations like network security, application security, and incident response, with high demand and resources to start.