{"id":3464,"date":"2023-06-20T22:14:34","date_gmt":"2023-06-20T20:14:34","guid":{"rendered":"https:\/\/archive.brucon.org\/2023\/?page_id=3464"},"modified":"2023-07-04T20:51:39","modified_gmt":"2023-07-04T18:51:39","slug":"abilities-driven-red-teaming","status":"publish","type":"page","link":"https:\/\/archive.brucon.org\/2023\/brucon-2023-training\/abilities-driven-red-teaming\/","title":{"rendered":"Abilities Driven Red Teaming"},"content":{"rendered":"<div class=\"wpb-content-wrapper\"><p>[vc_row][vc_column][vc_column_text]<\/p>\n<h2><span id=\"Course_Description\" class=\"mw-headline\">Course Description<\/span><\/h2>\n<div class=\"thumb tright\">\n<div class=\"thumbinner\">\n<div class=\"thumbcaption\">\n<div class=\"magnify\">\n<p><span style=\"font-weight: 400\">There are a lot of courses that you can take, virtual, in-person, etc that show you all of the tools and techniques under the sun. What sets this course apart is that we explain the \u201cWHY\u201d. After a combined 35 years of experience in red teaming and offensive security, egypt and mubix distill their TTPs in everything from building binaries, avoiding antivirus (EDR,XDR,BS-DR), to building your own company to take over another. In this 3 day course we have labs where we aren\u2019t trying to teach you any particular OS, tool, or technique, but how to think about those same OSs, tools and techniques, when to use them, and how to assess new ones as the field of infosec changes.<\/span><\/p>\n<p><span style=\"font-weight: 400\">Want to learn the newest, coolest, techniques? Go to a different class. Want to learn how to make any tool do what you want it to? This is the place to be.<\/span><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<p>[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n<h2><span id=\"Course_contents\" class=\"mw-headline\">Course contents<\/span><\/h2>\n<h3><b>DAY 1<\/b><\/h3>\n<ul>\n<li style=\"font-weight: 400\"><b>Setup <\/b><span style=\"font-weight: 400\">(while we would love everyone to show up completely ready to go, there is always a bit of setup required)<\/span><\/li>\n<li style=\"font-weight: 400\"><b>Red Team Infrastructure<\/b><span style=\"font-weight: 400\"> &#8211; Considerations in complexity and repeatability.<\/span><\/li>\n<li style=\"font-weight: 400\"><b>Open Source Intelligence Gathering<\/b><span style=\"font-weight: 400\"> (OSINT) from an attacker\u2019s point of view.<\/span><\/li>\n<li style=\"font-weight: 400\"><b>Building Binaries<\/b><span style=\"font-weight: 400\"> &#8211; The thought process behind selecting a C2, a type of binary, etc<\/span><\/li>\n<li style=\"font-weight: 400\"><b>Payload Delivery<\/b><span style=\"font-weight: 400\"> &#8211; How a payload is delivered to the target and the considerations taken into account when making that decision<\/span><\/li>\n<li style=\"font-weight: 400\"><b>Stolen Devices<\/b><span style=\"font-weight: 400\"> &#8211; A rare look at what Stolen Device engagement entail and why more companies should be testing them<\/span><\/li>\n<\/ul>\n<h3><b>DAY 2<\/b><\/h3>\n<ul>\n<li style=\"font-weight: 400\"><b>CxO Training<\/b><span style=\"font-weight: 400\"> &#8211; How to handle a breach, the technical and more importantly the non-technical aspects of them<\/span><\/li>\n<li style=\"font-weight: 400\"><b>Post-Exploitation<\/b><span style=\"font-weight: 400\"> &#8211; The 4 \u2018P\u2019s of Post Exploitation<\/span>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Presence<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Persistence<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Pivoting and Privilege Escalation<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h3><b>DAY 3<\/b><\/h3>\n<ul>\n<li style=\"font-weight: 400\"><b>Password Cracking<\/b><span style=\"font-weight: 400\"> &#8211; Tools and Considerations<\/span><\/li>\n<li style=\"font-weight: 400\"><b>Modifying Frameworks<\/b><span style=\"font-weight: 400\"> &#8211; Writing your own Metasploit, Empire and Silver modules \/ extensions<\/span><\/li>\n<li style=\"font-weight: 400\"><b>Attacking Active Directory<\/b><span style=\"font-weight: 400\"> &#8211; The state of the union on AD \/ Windows attacks<\/span><\/li>\n<li style=\"font-weight: 400\"><b>Attacking Web Apps<\/b><span style=\"font-weight: 400\"> &#8211; How to break down both external and more importantly internal web apps.<\/span><\/li>\n<li style=\"font-weight: 400\"><b>Attacking the Cloud<\/b> &#8211; How to find all of those SaaS, PaaS, and other aas solutions your targets have, and how to pivot from them to their internal network.<\/li>\n<\/ul>\n<p>[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n<h2><b>WHAT YOU SHOULD TAKE FROM THIS COURSE<\/b><\/h2>\n<p><span style=\"font-weight: 400\">This course should show you how to use different tools, techniques, and infrastructure in ways that optimize your success in your offensive security engagements. Or, if you are not a pentester \/ red teamer, it should show you what you can expect out of that space, either as a manager looking to get more value out of your pentesters \/ red teamers, or as someone new to infosec looking to get a good base of what is possible.<\/span>[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n<h2><span id=\"Target_audience\" class=\"mw-headline\">Target audience<\/span><\/h2>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Those new to Infosec that would like to get a taste of the offensive mindset and point of view. CISOs, Directors, Managing Directors, and Senior Managers are also welcome.<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Penetration Testers \/ Red Teamers<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Cyber Threat Intelligence Analysts<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">SOC Analysts<\/span><\/li>\n<\/ul>\n<p>[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n<h2><span id=\"Requirements\" class=\"mw-headline\">Requirements<\/span><\/h2>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Students will need to be familiar with and comfortable with using the command line in both Windows and Linux operating systems.<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Students will need to be familiar with and comfortable with basic networking concepts like ports, IP addressing, routing, and similar networking concepts.<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Students will need to be familiar with and comfortable with basic programming concepts like variables, arrays, functions, classes, and similar programming concepts.<\/span><\/li>\n<\/ul>\n<p>[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n<h2><span id=\"Hardware.2Fsoftware_Requirements\" class=\"mw-headline\">Hardware\/Software Requirements<\/span><\/h2>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Students will need to bring laptops to which they have administrative \/ root access, running either Windows, Linux, or Mac operating systems (no Chromebooks or Android devices). Minimum 20 GB of available space to load VMs. (Bringing a freshly updated VM of Kali Linux or Parrot Security Linux is preferred)<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Students will need to have access to VNC, RDP, SSH and Wireguard clients on their laptops.<\/span><\/li>\n<\/ul>\n<p>[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column width=&#8221;5\/6&#8243;][vc_column_text]<\/p>\n<h2><span id=\"Trainer_Biography\" class=\"mw-headline\">Trainers Biography<\/span><\/h2>\n<p><strong>Rob Fuller\u00a0<\/strong><span style=\"font-weight: 400\">has over 17 years of experience covering all facets of information security. He has been behind the lines helping to design, build, and defend the US Marine Corps, US Senate, and Pentagon networks &#8211; as well as performing penetration tests and Red Team engagements against those same networks. More recently, Rob has built and led numerous Red Teams in successful engagements against many of the Fortune 50 companies, representing some of the best defensive teams in the industry.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400\">Rob\u2019s experience and expertise ranges from embedded and wireless devices in ICS\/OT networks to standard IT infrastructures. He is a frequent speaker and trainer at a number of well-known security conferences. He has also served as a senior technical advisor for HBO\u2019s show Silicon Valley.\u00a0<\/span><span style=\"font-weight: 400\">Rob has acquired a number of certifications and awards over the years, but the ones he holds above the rest are father, husband, and United States Marine.<\/span><\/p>\n<p>Website : <a href=\"https:\/\/malicious.link\/\" target=\"_blank\" rel=\"noopener\">https:\/\/malicious.link\/<\/a><\/p>\n<p>Twitter :\u00a0<a href=\"https:\/\/twitter.com\/mubix\" target=\"_blank\" rel=\"noopener\">@mubix<\/a>[\/vc_column_text][\/vc_column][vc_column width=&#8221;1\/6&#8243;][vc_single_image image=&#8221;2320&#8243; style=&#8221;vc_box_circle&#8221; css=&#8221;.vc_custom_1687292063525{margin-top: 50% !important;}&#8221;][\/vc_column][\/vc_row][vc_row][vc_column width=&#8221;1\/6&#8243;][vc_single_image][\/vc_column][vc_column width=&#8221;5\/6&#8243;][vc_column_text]<strong>egypt &#8220;James&#8221; Lee <\/strong><span style=\"font-weight: 400\">has spent nearly two decades learning about offensive security and more than half that time teaching it. After starting out as a vulnerability researcher and exploit developer for ICS\/SCADA systems, he went on to become a developer for the Metasploit Framework where he worked on everything from core networking to exploits, payloads, and more in at least a dozen languages. He has also spent time as a penetration tester and as an internal Red Team engineer.\u00a0<\/span><span style=\"font-weight: 400\">He believes strongly that open source security tools are vital to the long-term health of the internet and is a vocal supporter of open source in general.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400\">Note that egypt is not Egypt. The two can be distinguished easily by their relative beards &#8211; Egypt has millions, while egypt only has the one.\u00a0<\/span><\/p>\n<p>Twitter :\u00a0<a href=\"https:\/\/twitter.com\/egyp7\" target=\"_blank\" rel=\"noopener\">@egyp7<\/a>[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<style type=\"text\/css\">.thegem-button-6adc8897e20291051 .gem-button svg {fill: #ffffff;}.thegem-button-6adc8897e20291051 .gem-button:hover svg {fill: #ffffff;}<\/style><div class=\"gem-button-container gem-button-position-fullwidth thegem-button-6adc8897e20291051    \"  ><a class=\"gem-button gem-button-size-giant gem-button-style-flat gem-button-text-weight-normal\" data-ll-effect=\"drop-right-without-wrap\" style=\"border-radius: 3px;background-color: #b43836;color: #ffffff;\" onmouseleave=\"this.style.backgroundColor='#b43836';this.style.color='#ffffff';\" onmouseenter=\"this.style.backgroundColor='#ef5047';this.style.color='#ffffff';\" href=\"https:\/\/brucon0x0f-training.eventbrite.co.uk\" target=\"_self\">Buy Training Ticket<\/a><\/div> [\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_empty_space][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>[vc_row][vc_column][vc_column_text] Course Description There are a lot of courses that you can take, virtual, in-person, etc that show you all of the tools and techniques under the sun. What sets this course apart is that we explain the \u201cWHY\u201d. After a combined 35 years of experience in red teaming and offensive security, egypt and mubix distill their TTPs in everything from building binaries, avoiding antivirus (EDR,XDR,BS-DR), to building your own company to take over another&#8230;.<\/p>\n","protected":false},"author":8,"featured_media":0,"parent":75,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-3464","page","type-page","status-publish"],"_links":{"self":[{"href":"https:\/\/archive.brucon.org\/2023\/wp-json\/wp\/v2\/pages\/3464","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/archive.brucon.org\/2023\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/archive.brucon.org\/2023\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/archive.brucon.org\/2023\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/archive.brucon.org\/2023\/wp-json\/wp\/v2\/comments?post=3464"}],"version-history":[{"count":3,"href":"https:\/\/archive.brucon.org\/2023\/wp-json\/wp\/v2\/pages\/3464\/revisions"}],"predecessor-version":[{"id":3487,"href":"https:\/\/archive.brucon.org\/2023\/wp-json\/wp\/v2\/pages\/3464\/revisions\/3487"}],"up":[{"embeddable":true,"href":"https:\/\/archive.brucon.org\/2023\/wp-json\/wp\/v2\/pages\/75"}],"wp:attachment":[{"href":"https:\/\/archive.brucon.org\/2023\/wp-json\/wp\/v2\/media?parent=3464"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}