حمیدرضا محسنیان

• متوسط
• مسیر قرمز
• ۱۱ درس

دربارۀ این دوره

مخاطبان

• کارشناسان ارزیابی امنیت، تست نفوذ و تیم قرمز
• متخصصان امنیت سایبری

پیش‌نیازها

• آشنایی با مفاهیم امنیت سایبری
• آشنایی با شبکه و پروتکل‌های پایه (TCP/IP ,DNS...)
• آشنایی با لینوکس
• مبانی PowerShell و اسکریپت‌نویسی
• مفاهیم پایۀ سیستم‌عامل
• داشتن تجربۀ کاری در حوزۀ تیم قرمز و فرایند آن

• Module 1: Introduction to Red Teaming & Cobalt Strike
  • Role of Cobalt Strike in Adversary Simulation
  • Cobalt Strike History & Evolution
  • Ethical & Legal Considerations
  • Understanding the Cobalt Strike Ecosystem (Team Server, Client, Beacon)
  • Lab Setup Overview (VMs, Domain, Infrastructure)
• Module 2: Environment & Infrastructure Setup
  • Preparing Attacker Infrastructure
  • Setting Up Cobalt Strike Team Server (Linux)
  • Using Domains, VPS, and Redirectors
  • Domain Fronting & CDN usage
  • HTTPS Certificates & OpSec considerations
  • Red Team Infrastructure as Code (Terraform, Ansible basics)
• Module 3: Cobalt Strike Fundamentals
  • Cobalt Strike GUI Walkthrough
  • Team Collaboration & Multi-Operator Setup
  • Listeners: HTTP, HTTPS, SMB, DNS, TCP,…
  • Payloads: Beacon Types (x86, x64, stageless, staged)
  • Artifact Generation (EXE, DLL, PowerShell, VBA, HTA, MSI)
  • Customizing Payloads with Artifact Kit & Resource Kit
• Module 4: Initial Access
  • Social Engineering Campaigns with Cobalt Strike
  • Phishing with Cobalt Strike’s Email Templates
  • Weaponizing Documents (VBA, Office Macros)
  • Malicious HTA, LNK and Script Execution
  • Using External Droppers (Metasploit, Custom Loaders)
  • Initial Callback & Listener Handling
• Module 5: Beacon Payloads Deep Dive
  • Beacon Architecture & Design
  • Staged vs. Stageless Payloads
  • Beacon Communication: HTTP/S, SMB, DNS
  • Beacon Sleep & Jitter Configurations
  • OPSEC Safe Payload Generation
• Module 6: Post-Exploitation
  • Beacon Command Basics (whoami, getuid, etc.)
  • File System Navigation & Exfiltration
  • Process & Service Enumeration
  • Keylogging, Screenshots, Clipboard Monitoring
• Module 7: Lateral Movement & Pivoting
  • Creating Pivot Paths with SOCKS Proxy
  • Tunneling Traffic Through Compromised Hosts
• Module 8: Persistence
  • Registry Run Keys & Scheduled Tasks
  • WMI Event Subscriptions
  • Service Creation & Hijacking
  • DLL Hijacking for Persistence
  • GPO-based Persistence
  • …
• Module 9: Advanced Cobalt Strike Features
  • Aggressor Scripting Basics
  • Building Custom Scripts for Automation
  • Customizing the Cobalt Strike GUI & Workflow
  • Red Team Tradecraft Automation (Exfil, Keylogging, Persistence)
  • Integration with Other Tools (Empire, Metasploit, Covenant And Your Custom Tools)
• Module 10: Data Exfiltration & Impact
  • Exfiltration Techniques with Cobalt Strike
  • Covert Channels (DNS, SMB, HTTP/S)
  • File Compression & Encryption for Exfil
  • Simulating Ransomware with Beacon
  • Wiping Logs & Anti-Forensics Techniques
• Module 11: Cobalt Strike reports
  • Report Writing for Red Team Engagements (Activity report,Hosts report,IOC report,Sessions report,TTP report,Social engineering report,Executive Summary,Goals & Scenario,Attack Narrative,Observations & Recommendations,Conclusion)

گواهینامه‌ی دوره