Red Team Engineer
Certified Red Team Engineer
Master offensive security, Active Directory attacks, web exploitation, privilege escalation, and C2 operations through hands-on Red Team labs.
What a red team actually is
A red team emulates a specific adversary against a specific objective, inside agreed rules, and
produces evidence that the defender either would or would not have caught it. The deliverable
is not a compromise — it is a defensible measurement.
This is a career track. It assumes you already know how to use a shell and read a web page, and
it spends its time on the things that separate an operator from a script kiddie: tradecraft
that survives detection, decisions under constraints, and the reporting that makes the whole
exercise worth funding.
What you will be able to do
- Operate under a rules-of-engagement document and stay inside it when it is inconvenient
- Build and maintain infrastructure an investigation team cannot trivially attribute
- Run phishing and initial-access tradecraft that survives a modern mail gateway
- Move laterally and escalate in Active Directory using both modern and legacy tradecraft
- Operate C2 with a domain front, malleable profiles, and jitter
- Exfiltrate convincingly enough to test a real data-loss control
- Write an executive summary and a technical report that changes behaviour
Assumed knowledge
Linux and Windows administration, HTTP, basic scripting, a working understanding of network
protocols, and a lab environment you are authorised to break. Authorisation is not optional.
Every technique in this track is dual-use; every exercise must be performed inside a scope you
have written down.
Syllabus
-
1
Rules of engagement and tradecraft infrastructure
Scope, approvals, deconfliction, and the infrastructure that decides whether you get caught by the wrong people.
Locked -
2
Reconnaissance and OSINT
Building the target map before a single packet goes out to the target.
Locked -
3
Initial access and phishing
Getting the first execution, and getting past a modern mail and endpoint stack.
Locked -
4
Post-exploitation and privilege escalation
From one user shell to SYSTEM and to domain control.
Locked -
5
Persistence, lateral movement and exfiltration
Staying in, spreading out, and taking the data out convincingly.
Locked -
6
Command and control, evasion, and the report
Implant operation, staying alive, and writing the thing the client will actually act on.
Locked
Final exam
Locked. Enrol in the course to unlock the final exam.