The RedTeam Blueprint - A Unique Guide To Ethical Hacking

You will have a base understanding of what these 3 Core Teams are.

You will have a solid understanding of what a Red Team is, how its used and where it fits into an organization.

You will have a solid understanding of what a Blue Team is, how its used and where it fits into an organization.

You will have a solid understanding of what a Purple Team is, how its used and where it fits into an organization.

Students will learn how to build out an internal Red Team at scale. Along with this a current and industry used Penetration Methodology that will outline the rest of the course.

You will learn a new industry Penetration Testing Methodology used at Silicon Valley Companies.

You will learn what Metrics are, how they are used and how to build them yourself!

You will have a solid understanding of what assessments are in a Red Team and start brain storming on different types.

Now that we have covered what assessments are you will learn how and why Yearly assessments are done.

Now that we have covered what Yearly assessments are you will learn how and why Quarterly assessments are done.

Now that we have covered what Quarterly assessments are you will learn how and why Monthly assessments are done.

Now that we have covered what Monthly assessments are you will learn how and why Constant assessments are done.

With a good understanding of the different types of assessments that are possible and their frequency I now task you with building your own for a Red Team! You will learn in this video how to build out your own.

Working with a budget and being able to build one speaks volumes about you as a professional. This is a key component to truly landing the job.

It's important to understand your specialty in the field of Ethical Hacking. This will help with job hunting as well as the interview process.

The CIA Triangle is commonly used in a large section of I.T. For Security it is paramount to understand why it is in place and what each step means.

Learn how to build a virtualization environment that will be utilized throughout the rest of the course.

Knowing your way around Windows is required for an attacker. A lot of enterprise companies still utilize Windows environments.

You will learn how the current Windows File System works and some intimate details about it.

Knowing where and how Windows logs it's events is a core skill to any Ethical Hacker.

User Account Control or UAC is going to get in your way as an Ethical Hacker. You need to get a good grasp on this topic and how its implemented to understand how to beat it!

Learning to abuse Windows? Permissions is where its at. This is by far the most commonly misconfigured element of Windows environments!

Alternate Data Streams or ADS is a great way to hide data but also can be used in some sneaky and creative ways.

API Calls in Windows can be complicated at first but once you understand what they do and how things get much easier. When looking at Windows based Privilege Escalation exploits you tend to see API Calls used and it makes reading and understanding them far easier!

The SID for Windows is a unique number for users/groups. Being able to quickly identify a user based on it's SID allows you to see a lower level of Windows.

Windows Tokens are one of my favorite concepts. You can abuse these in SO MANY ways. Token Impersonation is a key concept for any Ethical Hacker!

Windows Named Pipes are used by most applications in Windows. They have their own vulnerabilities and understand what they are and how they work can allow someone to be very "creative".

Here we take a look and how a PE and DLL file is structured and some of the components of each. This forms a base for knowledge to be gained in future modules.

Learning the Windows Command Line is a required skill for any hacker. You won't find yourself with a GUI very often and knowing how to move around, manage the machine and do what you need to without it is a hard requirement!

Learn about navigation in the Windows Command Line world!

Learn to work with files and directories in Windows Command Line.

As we learned about Named Pipes now we can use them in actions to see what we can do with them.

The Standard Input Output an Error are used throughout all Operating Systems. They are commonly used the same way in most OS's. This is a useful skill to make working on the Command Line far easier.

You never know when you need to make a configuration setting, add a rouge service or learn more about the system. Know how to manage Windows without the GUI!

We take our first look at Linux and figure out where the GUI went!

Before we dive into Linux its important to understand how the file system in laid out and that EVERYTHING is a FILE!

Since most of your time as an attacker is spent in a Terminal or Command Line its paramount to know how to navigate. This is fairly similar to Windows.

Since everything is a file, that includes directories, we need to know how to work with them!

Very similar to Windows Standard I/O/E we will do a quick recap on the subject in Linux.

How that we understand how to work with files we need to learn how to work with data itself. We go over how to manipulate data to our will!

Same with Windows Permission we must learn the Linux side of the fence. There are a lot of vulnerabilities that rely on configuration issues with permissions. Understanding this will provide you a greater insight on how things work and how they can be abused.

Man pages are the Linux Users quick look up replacement of Google Searching. These can provide very critical bits of information that are specific to a system without looking through countless white papers.

Being able to use and manipulate base64 is useful for not only encoding larger normally unreadable data but for getting binaries/data on and off machines!

Very similar to base64 use cases but has its uses elsewhere in other applications! Its important to understand how to quickly get and resolve hex/base64 data.

We quickly recap how to grab network connections in Linux as we did with Windows. Remember in Linux everything is a file!

Learn about how Linux processes work and the types you will run into.

INodes are an integral part of the Linux File System. They can be used in a lot of useful ways!

Since everything is a file dealing with Open Files is just as important! You will learn how to manage Open Files on Linux.

Abusing Symbolic Links is very fun but you need to know how to use them first!

Linux uses ID's just like Windows uses SID's. You will need to understand these as well when attacking a Linux Machine.

Similar to Windows Pipes Linux has their own! These are very useful for working with data.

We go over the Run Levels of Linux and what each of them mean. They each have their own attack vector.

Logging is a big topic on Linux machines. A lot of organizations will build their own logs and sometimes provide juicy information!

Here you will learn about the Linux Kernel and how it works.

Inside of the Kernel we have different ring levels. Each of these levels provide different privileges. With understanding this it helps work on exploit development and how attacks affect the Kernel.

We take a quick break from low level stuff to see how a CPU itself works.

When looking at the CPU there is a base component called Registers. These will be required in our Assembly section of the course so be sure to watch this!

Flags are similar to registers and are just as required for the Assembly course!

We take our first look at how memory works on computers. This can be a deep topic so rewatch if needed.

We take a stab at tackling the Stack! If you are wanting to learn Buffer Overflows or Exploit Development this is essential.

While Similar to the Stack The Heap helps out a different part of the process!

Here we provide some extra context on memory and the CPU!

In this video we take our knowledge of memory and the CPU and dive into a debugger!

We look at Address Space Layout Randomization or ASLR and how it works in Windows.

We quickly talk about AnitVIrus and some issues facing an Ethical Hacker.

Active Directory is a very common infrastructure at larger organizations. To best attack this type of infrastructure you should know how it works and be able to configure it yourself.

We hit the base configurations for a Windows Server for our needs.

We look at actually installing Active Directory on our specified Windows Server and how to configure it.

Understanding the Active Directory Tree is just as important as configuring Active Directory itself. An attacker will commonly find themselves investigating the Tree for issues.

Along with the Tree itself there are leaves or OU's. Theses contain all of the data and objects. You will have a good grasp on how and why things are setup the way they are.

We take a look at managing users and groups. This includes delegation of permissions and setting up help desk users.

We take our first look at extending the AD Infrastructure with another machine. This is a key step in configuration of a home lab.

Group Policies is what makes AD so useful. This is commonly the place that is abused from an attacker perspective.

We see how cached credentials can be dangerous.

We take our first look at Kerberos and see how it works and where it fits into a Red Team's attack vectors.

We talk about the first section of Kerberos and how Realms are handled by the service.

The next step of Kerberos is the Authentication Server. Understanding this is required for Kerberos.

We take a final look at Kerberos with the TGS. This is what is commonly abused by Ethical Hackers in the real world.

We take a look encryption and see how it works and how its used.

We take a look Symmetric Encryption and see how it works and how its used.

We take a look Asymmetric Encryption and see how it works and how its used.

We learn about RSA Encryption and where its use cases are.

We learn about AES Encryption and where its use cases are.

We take a quick look at what Hashing is and how it is used.

We see how MD5 works and where its vulnerable as well as its uses cases.

Learning SHA is important. This is a commonly used algorithm for a large amount fo protocols and services! 

Encoding is used everywhere! We take a look at what it is and how it works!

Base64 encoding is commonly used in Web Applications. It also has a few uses for Ethical Hackers as well!

Like Base64 this has its used to Ethical Hackers as well. Hex encoding is normally used internally to applications.

While exclusively used with Web Browsers URL Encoding is critical to understand when attacking any type of web application.

In this video we take a look at what compression is and where it is used.

We look at 2 common type of compression and when they should be used.

Now that we understand the compression types we will look at the 2 common algorithms that are used today.

We start with a hands on exercises for different types of data manipulation

We take a look at what Networking is and where it is used.

The OSI Model is a core concept for troubleshooting and understanding networks.

We take our first look at what TCP/IP is and how it is used in networks.

Following up TCP/IP we look at the other half at UDP.

We learn what a switch is, where its used and how it works.

We learn what a Router & Gateway is, where its used and how it works.

Now that we have a solid understanding on Networking and TCP/IP & UDP. We now look into what a protocol really is.

Take a deep look at ICMP.

DNS is not only critical for Networks but very useful for exfiltration to attackers.

DCHP is another core protocol for enterprise networks. Its critical to understand how this works from an attacker perspective.

IDS's are common in todays infrastructure. It's paramount to understand how theses works and where they are placed.

IPS's are common in todays infrastructure. It's paramount to understand how theses works and where they are placed.

High Availability or HA is one of the most important skills when looking at networks as this can make or break a conversation.

Proxies can make your life as an attacker easier or much more difficult.

Demilitarized Zones or DMZ can catch Hackers in a tough spot and being able to spot this is critical.

We talk quickly about databases and where they are used.