Red team

Table of contents

• Red team

  • Introduction

  • Learning focuses

    • Category

      • Learning tasks

      • Research & development tasks

      • Professional application tasks

    • Learning tasks execution

    • Research & development tasks execution

    • Professional application tasks

    • Custom tasks

Introduction

For more information about the purposes of this site view the about page. This page is meant to provide the neccessary info pertaining to Red Team activities occured in the 7th semester, the minor. For more information relating to the context of why this page exists visit the personal learning plan.

Learning focuses

In order to shape the upcoming curriculum, I’ve chosen various learning focuses for the blue team side. These are work in progress, and have to be developed out further.

---

Red-teaming

Category

In the tables below the category tab depicts the nature of the skill concercning the listed task.

The duration is not something I came up with; it is derived from the Personal Learning Plan assignment template.

Additionally to the standard, I’ve expanded with a custom table with tasks I came up with.

• T = Technical skills

• N = Non-technical skills

• R = Research & development skills

• P = Professional skills

Learning tasks

Task summary	Category	Duration	Requirement	Status
Follow the workshops related to hacking & red team	T	0.5day	Should	Done
Study pen testing methodologies and practices	T+P	2days	Must	Done
Take part of the Red v. Blue team	T+N	1days	Must	Done
Own one of the Linux based machines on Htb	T+N	2-3days	Must	Done
Own one of the Windows based machines on Htb	T+N	2-3days	Must	Done
Learn how reverse engineering works	T	2-3days	Should	Open
Pick a lock	T	1day	Should	Done
Experiment with phishing tools in a contained lab	T	1day	Should	Open
Visit building with a red team perspective	N	1day	Should	Cancl.
Learn how cryptography works	T	2-3days	Could	Open

Research & development tasks

Task summary	Category	Duration	Requirement	Status
Visit seminars related to developments in red team	R	1day	Should	Done
Organize/join a session to analyze new vuln.	T+P	2days	Must	Cancl.
Set-up environment for pen testing and red teaming.	T	2days	Must	Done
Develop a dropbox that can be used in red team	R+T	3days	Should	Open
Research covert channels and set-up one	R+T	2days	Should	Open
Research typical and known vulnerabilities in cloud	R+T	2-3days	Should	Done

Professional application tasks

Task summary	Category	Duration	Requirement	Status
Acquire Red-team pentest with a PiE and report	P+T+N	4days	Must	Done
Perform a pen-test on a shippable product	P+T+N	2days	Must	Done
Perform a test on a site with responsible discl.	P+T+N	2days	Must	Done
Perform vuln. analysis on IoT & report findings	P+T+N	3days	Should	Open

---

Learning tasks execution

• 1. Follow the workshops related to hacking & red team
• 2. Study pen testing methodologies and practices
• 3. Take part of the Red v. Blue team
• 4. Own one of the Linux based machines on Htb
  • Introduction
  • Lets get right into it
  • Reconnaisance
  • Exploitation
  • Recon.. again..
  • Back to exploitation
  • Python
  • Recon
  • A few days later..
  • API key acquired
  • Pivot
  • Second foothold
  • Understanding the env.
  • Credentials
  • User flag
  • Root exploitation
  • Root flag
  • Conclusion
• 5. Own one of the Windows based machines on Htb
• 6. Learn how reverse engineering works
• 7. Pick a lock
  • Task
  • Execution
• 7. Experiment with phishing tools in a contained lab
• 8. Visit building with a red team perspective
• 9. Learn how cryptography works

Research & development tasks execution

• 10. Visit seminars related to developments in red team
• 11. Organize/join a session to analyze new vulnerability
• 12. Set-up environment for pen testing and red teaming
  • Task
  • Execution
  • Introduction
  • Architecture
  • Tools
  • noVNC
  • Burp
  • Expansion
• 13. Develop a dropbox that can be used in red team
• 14. Research covert channels and set-up one
• 15. Research typical and known vulnerabilities in cloud
  • Introduction
  • Execution
  • Enumeration
  • Diving in
  • Failure

Professional application tasks

• 16. Acquire Red-team pentest with a PiE and report
  • Introduction
  • Meeting
  • Investigation
  • Agreement
  • Contract
  • Conclusion
• 17. Perform a pen-test
  • Task
  • Introduction
  • Meeting
  • Investigation
  • Agreement
  • Contract
  • Conclusion
• 18. Perform a test on a site with responsible disclosure
• 19. Perform vuln. analysis on IoT & report findings

Custom tasks

• 20. HackTheBox CTF to introduce beginners
• 21. Assemble HackTheBox Avengers Group
• 22. Pentest this site