Red Team Ethical Hacking - Beginner

Set up a Windows domain for red team lab activities, join computers to the domain, and create domain admin accounts; learn where to download VirtualBox, Kali, and Windows operating systems.

Learn to download and set up VirtualBox, Kali Linux, and Windows VMs (with VMware option) using 64-bit ISO images.

Configure a Windows domain controller for fun.com, set a static IP, install Active Directory Domain Services, create users and admins, join a client, and disable firewall and Defender.

Learn how red teaming, a stealthy cyber assessment of Windows Active Directory networks, differs from penetration testing and emphasizes post-exploitation effects, adversary TTPs, and tradecraft.

Explore the roles of red and blue teams and their differences. Blue teams defend by monitoring firewall and IDS/IPS logs, network activity, pcap with Wireshark, while red teams simulate adversaries.

Explore the Windows command prompt, PowerShell, WMIC, scheduled tasks, and the Service Control Manager, comparing cmd and PowerShell capabilities and noting potential misuse and system-level privileges.

Explore C2 frameworks for post exploitation, enabling MITRE ATT&CK–based command and control over compromised systems for data exfiltration and keylogging. Maintain access, collaboration, and customized profiles to blend in.

Explore red team tools PowerSploit, Bloodhound, Mimikatz, and Impacket to map Active Directory with Powerview, extract hashes and tickets, and test network access via Python and PowerShell modules.

Learn to set up a metasploit payload and listener on Kali, configure msfconsole with a multi handler, generate a Windows exe with msfvenom, and establish a meterpreter session.

Demonstrate essential Linux commands in Kali Linux, including navigation, file creation, viewing, and basic networking. Highlight how to access help and manuals, with focus on Windows targets.

Master essential Windows command line basics, including hostname, ipconfig, ping, nslookup, netstat, route, arp, and file operations like dir, cd, and echo to create and view text files.

Explore Windows account management in the command line, using whoami, net user, and net group to inspect domain admins and users, promote or demote admins, and leverage wmic.

Explore domain enumeration on a Windows red team using powerview, running commands like Get-NetDomain, Get-NetDomainController, Get-DomainPolicy, Get-NetComputer, and Get-NetLoggedOn to map domain info, controllers, policy, hosts, and logged-on users.

Explore basic host enumeration on Windows with simple commands like systeminfo, whoami /all, and net localgroup to reveal system, user, and service details, ports, processes, and hidden files.

Learn to copy, download, and upload files across local and remote targets using meterpreter, impacket SMB server, and C2 frameworks, with directory checks and file transfers.

Learn how to terminate processes locally and remotely as part of red team operations, using tools like tasklist, taskkill, and wmic.

Explore local and remote file execution methods, including running a calculator via command prompt or full path, and remote techniques using wmic, service creation with sc, and scheduled tasks.

Explore how the MITRE ATT&CK impact technique targets availability with local and remote shutdown, reboot, and logoff across Windows, Linux, and Mac OS, plus practical demo commands.

Demonstrate lateral movement via Windows Management Instrumentation Command (wmic) to remotely access the 132 host as a domain admin, copy a payload, and execute it.

Demonstrates manual lateral movement with scheduled tasks to run a reverse shell as system, including copying the payload to a remote host and creating a one-time task.

showcases lateral movement via the service control manager, creating and running a remote service to execute a payload, mirroring psexec with admin shares, msfvenom payloads, and system-level access.

This beginner lecture demonstrates registry-based persistence by creating a registry key that runs a payload at user logon, using Metasploit sessions and the registry editor to target multiple user accounts.

demonstrates persistence on windows by creating a scheduled task with /create to run calc.exe as a payload every 10 minutes, and verifying with /query using the task name.

Demonstrates persistence on a Windows host by creating a service that launches a payload at startup, achieving a system-level session and verifying with service queries.

Explore persistence through WMI event subscriptions, view current subscriptions, and create permanent WMI event subscriptions using MOF files and PowerShell, including filters, consumers, and bindings.

Discover how golden tickets grant domain admin rights in a Windows domain, using Mimikatz to obtain the krbtgt hash and Domain SID and create a ticket for persistence.

Learn the basics of evasion in red team operations, including how blue teams detect activity, and practical demos on blending in, disabling defenses, and exploiting unwatched areas while managing logs.

Showcases how to detect automated lateral movement with Sysmon from a C2 post-exploitation framework, including installation, configuration, and analysis of event logs to identify indicators.

Explore sysmon evasion techniques used by red teams, including disabling, blending in, and exploiting unwatched areas. Learn to detect these tactics through process monitoring, altitude checks, and sysmon configuration.