Red Team Playbooks

Note

I am currently in the process of moving the notes to GitBook which takes quite some time and after that, I am going to rework and finalize version 1.0 of the playbooks. Stay curious!

This repository contains cutting-edge open-source tools, techniques and procedures that will help you during your Red Team engagements.

I tried as good as I can to all resources I used in this projects. If I used code or other resources from you and you are not yet listed in the shoutout box below, feel free to reach out to me and I will add you asap.

Table of Contents

• Kickoff
• Operations
• Infrastructure
• 1 Reconnaissance
  • 1.1 Scanning and Enumeration
• 2 Weaponization
  • 2.1 Initial Access
• 3 Delivery
• 4 Exploitation
  • 4.1 Defense Evasion
  • 4.2 Credential Dumping
  • 4.3 Privilege Escalation
  • 4.4 Lateral Movement
• 5 Installation
  • 5.1 Persistence
  • 5.2 Situational Awareness
• 6 Command-and-Control
• 7 Actions-on-Objective
  • 7.1 Post Exploitation
  • 7.2 Exfiltration

Books I used for the playbooks

• Red Team Development and Operations by Joe Vest & James Tubberville
• RTFM by Ben Clark
• RTFMv2 by Ben Clark & Nick Downer
• PTFM by Tim Bryant
• Internal Security Assessment: Field Guide by Paul Seekamp (awesome person!)
• Cybersecurity Attacks - Red Team Strategies by Johann Rehberger

Special thanks and a huge shoutout to the following people

IppSec, 0xdf, xct, John Hammond, Alh4zr3d, securibee, Paul Seekamp, Vickie Li, James Kettle, NahamSec, Jason Haddix, STÖK, carlospolop, Swissky, snovvcrash, RastaMouse, bigb0sss, g0tmi1k, mr.d0x, gentilkiwi, byt3bl33d3r, cube0x0, HarmJ0y, S3cur3Th1sSh1t, PinkDraconian, PwnFunction, christophetd just to name a few and all the people behind these awesome repositories I referenced in this collection!

Thank you all for your hard work, support and inspiration since the start of my hacking journey!