The RED Teaming Training Course

Practice web application exploitation using the dvwa vulnerable app, mastering sql injection and lfi. Learn by testing rfi, file upload, xss, and rce in a hands-on lab.

Explore core web vulnerabilities with hands-on practice in a Kali lab, covering HTML injection, SQL injection, CSRF, XSS, RFI/LFI, IDOR, SSRF, and other common flaws.

Build practical bug bounty workflows from target selection to disclosure on public programs like HackerOne and Bugcrowd, with focus on quick-win vulnerabilities and responsible disclosure.

Master Active Directory basics and practical red team attacks, including domain controllers, OU, group policy, delegation, and Kerberos/NTLM concepts, with OSCP exam prep.

Learn Kerberos authentication, including TGTs and TGS, SPN, and how to enumerate, perform password spraying, and golden and silver ticket attacks in an Active Directory domain.

Explore Active Directory Kerberos attacks in an OSCP setting, including pre-authentication disabled scenarios, TGT and TGS handling, and post-exploitation with Mimikatz and golden or silver tickets.

Master information gathering, including passive and active reconnaissance, then scan for live hosts and services with Nmap, and plan red-team exploits using exploit databases for OSCP prep.

Develop practical red team skills for the OSCP context by enumerating a Mr. Robot CTF target, using Nmap and WPScan, and pursuing privilege escalation through WordPress exploration.

Master red team and OSCP exam techniques by solving a Mr. Robot ctf task, brute-forcing a WordPress login, deploying a reverse shell, and escalating to root via Nmap interactive.

Engage in hands-on red team techniques on a windows box for oscp exam prep, from reconnaissance and nmap enumeration to smb access, credential extraction, and privilege escalation using msf venom.

In this session, learners solve the bounty hacker task on a red team machine, enumerate ports, brute-force ssh with hydra, obtain user and root flags, and practice oscp-like privilege escalation.

Study Active Directory attack techniques for the OSCP exam by solving a TryHackMe Active Directory room, practicing enumeration, buffer overflow, and tools like Impacket, BloodHound, Neo4j.

Master OSCP exam tactics for red teaming, from Active Directory breach and privilege escalation to thorough reporting, using a shared methodology, cheat sheets, and hands-on practice.

Join the OSCP exam preparation first workshop in the red teaming course to learn Kali Linux lab setup, exam requirements, and hands-on penetration testing strategies.

Learn how the ls command lists files, including hidden ones with -a and long, line-per-file output with -l for automation.

Linux uses a single root directory, represented by the slash, not drive letters. Navigate with the cd command, view your location with pwd, and return to home with cd tilde.

Use mkdir to create directories, prefer hyphens or underscores for easier autocompletion, and use brace expansion with mkdrp to rapidly build a test directory with recon, exploit, and report.

Master the locate command for quick file searches via a database updated by cron, and master the find command's flexible syntax for searching by name, age, size, owner, and permissions.

Manage kali linux services by preventing boot-time startup, using whitelist and blacklist controls, and start ssh with systemskdl; verify it listens on port 22 via ss.

Explore bash, a sh-compatible shell, and how it uses environment variables like path, user, pwd, and home to run commands in a terminal; view with echo and export for subprocesses.

Red team engagements complement traditional penetration tests by evaluating detection and response through emulating real threat actor TTPs, guiding blue team improvements.

Explore red team engagements that reveal vulnerabilities across technical infrastructure, social engineering, and physical intrusion, from full engagement to tabletop exercises, simulating attacker workflows.

Penetration tests extend vulnerability assessments by simulating attacker impact on the network, exploiting vulnerabilities, performing post-exploitation tasks, and chaining findings to reveal risks and possible pivots.

Explore the differences between red team, blue team, and white team, with red as offensive, blue as defensive, and white as referee coordinating the engagement, bias-free and ROE compliant.

Identify external, internal, and endemic adversaries in cyber security management, including criminals, nation-states, compromised internal users, and decision makers whose policies hinder detection and response.

Explore the cyber kill chain framework, detailing the seven stages from reconnaissance to actions on objectives, and learn how intelligence-driven defense helps detect and respond to cyber attacks.

Explore the MITRE ATT&CK framework, a globally accessible knowledge base of adversary tactics and techniques based on real-world observations. Use this common language to develop threat models and methodologies.

Advance organizational security with the purple team exercise framework (ptf) that guides building a skilled purple team through adversary emulations and continuous purple teaming across 18 phases of end-to-end cyber-attacks.

Learn intelligence-led cyber attack simulation testing with ICAST, an HKMA framework that models real adversaries’ TTPs to assess banks' ability to prevent, detect, and respond.

Explore hacker categories, from white hat ethical hackers conducting authorized tests to gray hat actors with mixed ethics, and black hat criminals behind ransomware and data damage.

Explore the OSSTMM, a peer-reviewed security testing methodology, to characterize operation security across five channels: human, physical, wireless, telecommunications, and data networks, for tailored penetration testing and ethical hacking.

Explore the open web application security project OWASP and its testing framework, including the web security testing guide, mobile security testing guide, firmware security testing methodology, and PTES.

Perform authorized penetration tests to identify vulnerabilities across black box, white box, and gray box scenarios. Learn how testers simulate real-world attacks with varying levels of knowledge and access.

Learn passive information gathering as a core red team skill, using Google advanced queries to collect target data without contact, then contrast with active reconnaissance.

Master passive information gathering using Google, Shodan, Wappalyzer, and BuildWiz. Map subdomains and technologies, then verify with Whois and DNS dumpster.

Explore buffer overflow vulnerabilities that occur when data exceeds buffers, enabling attackers to inject malicious code, overwrite memory, and gain shell access due to boundary gaps and insufficient input sanitization.

Explore the five registers in stack memory: EBP, ESP, EIP, ESI, and EDI, as extended base pointer, stack pointer, instruction pointer, source index, and destination index.

Follow steps to exploit Windows-based buffer overflow vulnerabilities, including spiking, fuzzing, offset identification, eip overwrite, bad character identification, module selection, shellcode generation, and gaining root access.

Learn fuzzing to exploit a buffer overflow on the target server, identify crash bytes, locate EIP register, and study a Python script using while loop to send data for shellcode.

Identify the offset to EIP through fuzzing and pattern generation, using scripts to test a vulnerable server and observe how random bytes overwrite the stack during a buffer overflow.

Investigate how the EIP register can be overwritten by testing control at an offset of 2003 bytes using a Python script, illustrating the potential to inject malicious shellcode.

Identify bad characters before injecting shellcode into the eip register by using Google search and a Python script, then verify in Immunity Debugger that no bad characters affect the shellcode.

Identify the right module with weak memory protection using mona.py in Immunity Debugger, inspect its protection settings, and assess how the return address can control the EIP.

Explore shellcode concepts in red team training and discuss simulating shell access to a vulnerable server, with emphasis on detection, defense, and ethical security testing.

Demonstrate AS-REQ pre-authentication in Kerberos: the user encrypts a timestamp NT hash, the KDC decrypts it, and issues a TGT plus a session key.

Understand how a ticket granting ticket is issued and validated: the user provides the TGT to the KDC, which validates it and returns a service ticket.

Explain Kerberos authentication by detailing a service ticket’s two portions: the service portion with user details and session key, and the user portion with a validity timestamp.

Master the Kerberos authentication flow, from client requests for a ticket and TGT, through TGS verification with SPN, to obtaining a session key and access to the service.

Explore how Kerberos tickets work, from ticket granting tickets to service tickets, including .kirby and .ccash formats, base64 encoding, and how a TGT enables access to any domain services.

Explore enumerating active directory users with Kerbroot, harvesting TGTs with robust, cracking Kerberos tickets with hashcat, and performing AS reposting to crack offline passwords.

Explore how the domain name system translates names to IPs, DNS hierarchy, and records such as A, AAAA, CNAME, MX, TTL, and how HTTP/HTTPS requests transport web pages.

Learn practical bug bounty hunting techniques by identifying OWASP top 10 vulnerabilities, including HTML injection and OS command injection, in lab environments with bug bounty tips.

Explore bug bounty hunting fundamentals by examining IDOR and parameter tampering, CSRF, XSS, and SQL injection, with hands-on demonstrations using Burp Suite and sqlmap.