Red Teamer

// curriculum path

1. 1
   Internal / AD PentestBeginneravailable · start

   AD basics — LDAP enumeration, Kerberos roasting, GPP creds.

2. 2

   Network / Infra PentestBeginnerlocked

   Network recon + perimeter testing before going internal.

3. 3

   Internal / AD PentestIntermediatelocked

   DCSync, NTLM relay, Constrained Delegation abuses.

4. 4

   Internal / AD PentestAdvancedlocked

   ADCS abuse (ESC1-ESC8), forest trust attacks, persistence.

5. 5

   Cloud PentestIntermediatelocked

   AWS / Azure pivots — IMDS abuse, assume-role chains, key exfil.

6. 6

   DevSecOps / AppSecIntermediatelocked

   CI/CD pipeline takeover — most modern shops live in GitHub Actions.

7. 7

   Internal / AD PentestExpertlocked

   Custom C2, EDR evasion, full red-team campaign tradecraft.