The Red Team Specialist [CRTS V1] lab offered by cyberwarfare.live is a comprehensive, hands-on learning environment designed to provide real-world experience in performing adversary simulations. In this lab, you will perform adversary simulations in an Electric PowerGrid Facility You will exploit AD Domain & Certificate Services, Exchange, SSO, MFA & VDI. The lab allows you to follow the Red Team Cycle in multi-segregated networks. Two unique paths are mapped with MITRE ATT&CK for Enterprise. The covered TTPs can be as-is implemented during a realistic engagement.
Syllabus
Perform Cyber Kill Chain
- Extensive OSINT Enumeration
- Exploit Remote Access Services (VDI, RDS etc)
- Custom Privilege Escalation
- Custom Web Exploitation
- Abuse LOLBAS to stealthily exfiltrate data
- Follow MITRE ATT&CK; Framework
Abuse Active Directory Environment
- Abuse Constrained & Unconstrained delegation
- Kerberoasting and AS-REP Roasting
- Credential Replay Attacks (PTH, OPTH, PTT etc)
- Multiple Cross Forest Abuse Scenarios (FSP, Kerberoasting, Delegation etc.)
- Token Manipulation attacks
- Abusing SQL Server Links from Linux Machines
- Abuse Linux Machines in AD Environment
Lateral Movement and Network Pivoting
- From Linux to Windows, Windows to Windows, Windows to Linux etc
- Abuse Internal Remote Services in Multi-OS environment
- Alternative authentication methodologies
- Understand Local, Remote Port Forwarding, various proxies etc
- Multi-level in-depth network pivoting in Windows & Linux OS
Abuse Enterprise Grade Software
- Abuse Automation Software
- Abuse Secret Servers
- Understand & Exploit CI/CD Pipeline
- Custom attack vector development for user phishing
- Abuse bastion host
Escape Containerized Environment
- Multiple methods to escape containers
- Simulated environment
- Multi-Level Container Breakouts
