red-team-skill-tree: a full-stack offensive security reference
A comprehensive red team skill reference covering the full offensive-security stack - from anti-attribution and reconnaissance to post-exploitation, malware evasion, cloud-native attacks, and AI-powered offense. Based on a real training curriculum, updated with 2025-2026 APT techniques.
Coverage (24 sections)
| # |
Topic |
Coverage |
| 1 |
Anti-Attribution and Anonymization |
OPSEC, encrypted VMs, anonymous network chains, crypto laundering |
| 2 |
Reconnaissance |
OSINT, SGK, asset platforms, supply-chain mapping, CDN bypass |
| 3 |
Penetration Testing |
Web app attacks (SQLi/RCE/upload), framework exploits, container escape |
| 4 |
Code Audit |
Java (MyBatis/deserialization/SSTI), PHP (ThinkPHP RCE chains), .NET, memory shells |
| 5 |
Post-Exploitation and Lateral Movement |
AD attacks (Kerberos/delegation/CVEs), credential harvesting, privilege escalation |
| 6 |
Host Credential Extraction |
Browser/SSH/RDP/VPN password decryption tools |
| 7 |
Social Engineering |
Phishing pretexts, waterholing, malicious payload crafting |
| 8 |
C2 Development |
Cobalt Strike customization, Godzilla modification, traffic forwarding |
| 9 |
Malware Evasion |
EDR blinding (driver-level), static/dynamic/traffic evasion, injection techniques |
| 10 |
Forensic Image Recovery |
Linux disk image restoration for evidence analysis |
| 12 |
AI-Powered Attacks |
Deepfake phishing, LLM-assisted malware, AI infrastructure CVEs, OWASP LLM Top 10 |
| 13 |
Cloud-Native Attacks |
Kubernetes escape (runc/eBPF), serverless, CI/CD supply chain |
| 14-24 |
Advanced Techniques |
Modern C2, sleep obfuscation, ADCS (ESC1-16), MFA bypass, zero-trust evasion, OT/ICS, mobile, living-off-the-land |
Files
| File |
Description |
red-team-skill-tree.md |
Main content - refined skill tree, 24 sections (English) |
red-team-skill-tree.zh-CN.md |
Main content - 24-section reference (Chinese) |
red-team-skill-tree-outline.md |
Original XMind export, raw outline (English) |
red-team-skill-tree-outline.zh-CN.md |
Original XMind export (Chinese) |
red-team-skill-tree.xmind |
XMind source file |
red-team-skill-tree.png |
Full-resolution mind map |
Repo: https://github.com/lupingQAQ/red-team-skill-tree
Top comments (0)