Offensive Security Engineering

Course introduction. In this lecture the instructor introduces himself and goes over the course outline.

This lecture is a simple primer to help you configure and cover the fundamentals of Terraform.

This lecture is a simple primer to help you configure and cover the fundamentals of the Serverless Framework.

This lecture is a simple primer to help you configure AWS credentials and keys if you choose to follow along with the course material directly.

In this lecture we break down specific OSI model components and review a full stack app's network architecture. We also build out a mini "enterprise tier" network topology.

Simple quiz to see if you've got the fundamentals re-established.

In this lecture we go over the concepts of client/server communications, and bridge those concepts to the fundamentals of C2 communications.

This quiz will test if you are properly grasping the fundamental concepts of C2.

This lecture covers the concept of reverse VPN tunneling and walks through a hands on implementation for configuring this concept.

This lecture walks through the fundamental concepts of system administration in the context of DevOps. We explore tools like Terraform and Saltstack and explain the ideas of Infrastructure as Code and Desired State.

This quiz covers the concepts of infrastructure as code, desired state, and configuration management.

This lecture is a brief overview of what "Red Teaming" is and the purpose and value it provides.

This is a simple 3 question quiz to make sure we are setting some fundamental truths right about offensive security testing. Only one of them was covered in the lecture you will need to research on your own to discover the answers to the rest!

This lecture ties together the Red Team and Infrastructure Operations concepts together.

This is just a quick transitional lecture to overview the Scenarios that will be demonstrated throughout the course.

This lecture is a hands on walk through of setting up a simple C2 server with Terraform and Metasploit to conduct a classic exploitation scenario.

This lecture is a hands on walk through of performing some simple post-exploitation activities with Metasploit as our C2.

This lecture is a hands on walk through for configuring an OpenVPN based drop box scenario. Our drop box will make use of reverse VPN tunneling to give us remote access to an internal target network allowing use to compromise the systems within.

This lecture we continue into the post-exploitation phase of the drop box scenario. This is a hands on walk through involving the configuration and use of the Empire C2 framework.

This lecture covers the PwnDrop tool for hosting C2 implants as a lead into the next lecture where we will use it to serve Merlin C2 framework agents.

Using the PwnDrop tool to host a Merlin C2 agent to establish a post-exploitation presence on a compromised Windows host.

This lecture is a walk through on developing a custom C2 server and implant using python and golang.

This lecture goes over the primary scenario in this section and walks through configuring and using the Gophish platform for conducting a convincing phishing campaign.

This lecture walks through the entire scenario end to end including configuring a custom golang based Lambda redirector for our custom C2 implant.

This is a short lecture on how to configure Teamserver for multi-user C2 and Red Teaming for Cobalt Strike/Armitage.

This is a short lecture on how to configure Sliver for multi-user C2 and Red Teaming.