Red Team Bundle

Browse all skill bundles

Included Skills (15)

1. Red Team Tactics — Red team tactics principles based on MITRE ATT&CK. Attack phases, detection evasion, reporting.
2. Exploiting Nopac Cve 2021 42278 42287 — Exploits the noPac Active Directory privilege-escalation chain (CVE-2021-42278
3. Operating Havoc C2 — The skill deploys a Havoc C2 team server with Yaotl malleable profiles and generates evasive Demon agents that use indirect syscalls and sleep obfuscation. It supports the full C2 lifecycle—server setup, implant generation, tasking, and lateral pivoting—enabling realistic adversary emulation for authorized red‑team engagements. Security professionals benefit from a comprehensive, rules‑of‑engagement‑compliant platform for post‑exploitation and pivoting operations.
4. Performing Lateral Movement With Wmiexec — Perform lateral movement across Windows networks using WMI-based remote
5. Red Team — Use when planning or executing authorized red team engagements, attack path analysis, or offensive security simulations. Covers MITRE ATT&CK kill-chain planning, technique scoring, choke point identification, OPSEC risk assessment, and crown jewel targeting.
6. Auditing Entra Id With Aadinternals — Drive the AADInternals PowerShell toolkit to perform Microsoft Entra ID tenant reconnaissance, access-token acquisition across Microsoft APIs, and federation/AD FS backdoor testing (Golden SAML, T1606.002) for defensive validation. Use during an authorized Entra ID/Microsoft 365 red-team assessment to map external attack surface or verify AD FS signing certs resist Golden SAML.
7. Exploiting Active Directory Certificate Services Esc1 — Exploit misconfigured Active Directory Certificate Services (AD CS) ESC1
8. EternalBlue Exploitation Tool — This tool identifies and exploits critical MS17-010 vulnerabilities in legacy Windows SMBv1 systems to assist security professionals during authorized red-team penetration testing engagements.
9. Red Team Planner — This tool assists cybersecurity professionals in defining engagement scope, rules, and threat profiles to ensure safe and structured adversary simulation testing.
10. Performing Kerberoasting Attack — Perform Kerberoasting, a post-exploitation technique that enumerates
11. Performing Open Source Intelligence Gathering — Open Source Intelligence (OSINT) gathering is the first active phase
12. Performing Privilege Escalation On Linux — Guides manual enumeration and automated tooling to escalate from a low-privilege
13. Exploiting Active Directory With Bloodhound — BloodHound is a graph-based Active Directory reconnaissance tool that
14. Performing Red Team With Covenant — Conducts red team operations using the Covenant C2 framework for authorized
15. Performing Active Directory Forest Trust Attack — Enumerate and audit Active Directory forest trust relationships using