Offensive Cybersecurity

Use Python variables, collections, conditions, and loops to transform structured operational data.

Write a Python script that reads and writes JSON or CSV operation records.

Add command-line arguments, error handling, and logging to a small Python automation script.

Use the PowerShell object pipeline to filter, transform, and export authorized lab data.

Write a reusable PowerShell function that automates a routine lab administration task.

Store script configuration and secrets using environment variables and access controls rather than hard-coding them.

Use Git commits and branches to maintain an auditable collection of operator scripts.

Explain the roles of domains, redirectors, command-and-control servers, operator workstations, and test endpoints in red-team infrastructure.

Draw a segmented infrastructure architecture with explicit trust boundaries and administrative paths.

Configure DNS and TLS for an authorized lab service and validate the resulting resolution and certificate chain.

Configure a reverse proxy in a lab to forward only traffic that meets defined routing rules.

Apply host hardening, firewall restrictions, least privilege, and secure administration to a lab server.

Configure time synchronization and centralized operational logging across lab infrastructure.

Test an infrastructure traffic path systematically and isolate the cause of a simulated failure.

Describe how team servers, listeners, communication profiles, agents, and operator clients interact in a command-and-control system.

Compare command-and-control channels by reliability, exposure, environmental fit, and operational cost.

Deploy a command-and-control team server and listener within an isolated, authorized lab.

Configure individual operator accounts and role-based access for a collaborative lab operation.

Establish a test endpoint check-in and verify that it follows the intended communication path.

Perform session tasking, result collection, and file handling while maintaining a complete activity log.

Recover from a simulated infrastructure exposure by rotating affected components according to a prepared contingency plan.

Convert an operation plan into a concise operator runbook with prerequisites, validation steps, and abort criteria.

Maintain a shared target and session tracker using consistent identifiers and status definitions.

Perform a structured session handoff that preserves context, evidence, and outstanding risks.

Apply a go/no-go decision process when a planned action could exceed scope or disrupt the target environment.

Protect operational notes and evidence using access controls, integrity checks, and an agreed retention process.

Execute an authorized cleanup checklist and verify removal of operation-specific lab artifacts.

Conduct an after-action review that separates planning, tooling, communication, and execution lessons.

Map red-team actions to the network, endpoint, identity, and infrastructure telemetry they can generate.

Inspect authorized lab logs to identify observable artifacts produced by a command-and-control workflow.

Compare alternative techniques using prerequisites, reliability, operational noise, and likely defensive visibility.

Evaluate how communication timing and transport choices affect both operational reliability and detectability.

Distinguish permitted defense-evasion testing from prohibited security-control impairment using rules-of-engagement examples.

Design a controlled validation exercise that allows red and blue teams to assess one detection hypothesis.

Select a scope-compliant contingency after a simulated detection event and document the decision rationale.

Create a threat-informed campaign charter that links business objectives, adversary behaviors, and measurable outcomes.

Produce a technical operation design covering infrastructure, access control, communications, logging, and contingencies.

Conduct a pre-operation readiness review and record unresolved risks as explicit go/no-go decisions.

Reconstruct a campaign timeline from operator logs, infrastructure records, and collected evidence.

Write a finding that connects observed adversary behavior to business impact and relevant defensive controls.

Prepare an executive debrief that distinguishes achieved objectives, detection opportunities, and operational limitations.

Build a role-focused development plan that turns capstone gaps into practical red-team career milestones.