DEV Community

lupingQAQ
lupingQAQ

Posted on

red-team-skill-tree: a full-stack offensive security reference

red-team-skill-tree: a full-stack offensive security reference

A comprehensive red team skill reference covering the full offensive-security stack - from anti-attribution and reconnaissance to post-exploitation, malware evasion, cloud-native attacks, and AI-powered offense. Based on a real training curriculum, updated with 2025-2026 APT techniques.

Coverage (24 sections)

# Topic Coverage
1 Anti-Attribution and Anonymization OPSEC, encrypted VMs, anonymous network chains, crypto laundering
2 Reconnaissance OSINT, SGK, asset platforms, supply-chain mapping, CDN bypass
3 Penetration Testing Web app attacks (SQLi/RCE/upload), framework exploits, container escape
4 Code Audit Java (MyBatis/deserialization/SSTI), PHP (ThinkPHP RCE chains), .NET, memory shells
5 Post-Exploitation and Lateral Movement AD attacks (Kerberos/delegation/CVEs), credential harvesting, privilege escalation
6 Host Credential Extraction Browser/SSH/RDP/VPN password decryption tools
7 Social Engineering Phishing pretexts, waterholing, malicious payload crafting
8 C2 Development Cobalt Strike customization, Godzilla modification, traffic forwarding
9 Malware Evasion EDR blinding (driver-level), static/dynamic/traffic evasion, injection techniques
10 Forensic Image Recovery Linux disk image restoration for evidence analysis
12 AI-Powered Attacks Deepfake phishing, LLM-assisted malware, AI infrastructure CVEs, OWASP LLM Top 10
13 Cloud-Native Attacks Kubernetes escape (runc/eBPF), serverless, CI/CD supply chain
14-24 Advanced Techniques Modern C2, sleep obfuscation, ADCS (ESC1-16), MFA bypass, zero-trust evasion, OT/ICS, mobile, living-off-the-land

Files

File Description
red-team-skill-tree.md Main content - refined skill tree, 24 sections (English)
red-team-skill-tree.zh-CN.md Main content - 24-section reference (Chinese)
red-team-skill-tree-outline.md Original XMind export, raw outline (English)
red-team-skill-tree-outline.zh-CN.md Original XMind export (Chinese)
red-team-skill-tree.xmind XMind source file
red-team-skill-tree.png Full-resolution mind map

Repo: https://github.com/lupingQAQ/red-team-skill-tree

Top comments (0)