Red Teaming
An end-to-end red-team curriculum — tradecraft, initial access, evasion, credential access, lateral movement, and C2, mapped to MITRE ATT&CK. Follow it top to bottom — foundational first (20 tutorials).
Red TeamingHTML Smuggling and ISO/IMG-Based Payload DeliveryHTML smuggling assembles payloads inside the browser, defeating perimeter inspection. This lab builds the full ISO/LNK delivery chain used by NOBELIUM and…Read →Red TeamingIntroduction to C2 Frameworks: Cobalt Strike, Havoc, and SliverMaster Cobalt Strike, Havoc, and Sliver C2 frameworks with real operator commands, lab setup, and detection coverage using Sysmon, ETW, and Sigma…Read →Red TeamingC2 Beaconing: Sleep, Jitter, and Communication PatternsLearn how C2 beacons use sleep timers, jitter, and protocol shaping to evade detection - then build a working implant in C,…Read →Red TeamingMalleable C2 Profiles: Blending Into Legitimate TrafficLearn how Cobalt Strike's Malleable C2 DSL disguises Beacon as legitimate jQuery traffic - then flip perspectives and catch it with Sysmon,…Read →Red TeamingDomain Fronting and CDN Redirection for C2 ResilienceLearn how domain fronting exploits the SNI/Host header split to route C2 traffic through CDN infrastructure undetected. Covers full redirector chain setup…Read →Red TeamingAV and EDR Concepts: How Detections Work Against Offensive ToolsTear apart every EDR detection layer - inline NTDLL hooks, kernel callbacks, ETW Threat-Intelligence, AMSI, and WFP - against a real injector.…Read →Red TeamingObfuscation Techniques: String Encoding, XOR, and Payload EncryptionBuild a shellcode loader that stacks Base64, XOR, RC4, and AES-256 obfuscation against a benign calc.exe payload - then learn exactly which…Read →Red TeamingAMSI Internals and Bypass TechniquesLearn how AMSI works in-process, then defeat it three ways - AmsiScanBuffer memory patch, amsiInitFailed reflection, and DLL hijacking - while understanding…Read →