Advanced Offensive Security Red Team

เนื้อหาการอบรม

• Day1: Module 1 : Red Team Planning & Methodology
  • Offensive Security Overview
  • Red Team vs Penetration Testing
  • MITRE ATT&CK Framework
  • PTES & Cyber Kill Chain
  • Rules of Engagement (RoE)
  • Scoping & Target Profiling
  • Workshop: Mapping Attack Path ด้วย MITRE ATT&CK
• Day2: Module 2 : Reconnaissance & Initial Access (ช่วงเช้า)
  • Passive/Active Reconnaissance
  • OSINT (Google Dork, Shodan, FOFA, Censys, GitHub)
  • Web & Network Enumeration
  • Vulnerability Assessment
  • Initial Access Techniques
  • Workshop: Passive/Active Reconnaissance and Vulnerability Assessment
• Day2: Module 3 : Privilege Escalation (ช่วงบ่าย)
  • Windows Privilege Escalation
  • Linux Privilege Escalation
  • UAC Bypass, Token Manipulation (เชิงแนวคิด)
  • Workshop: Enumeration & Privilege Escalation
• Day3: Module 4 : Lateral Movement & Pivoting (ช่วงเช้า)
  • Pass-the-Hash
  • Pass-the-Ticket
  • Kerberoasting
  • AS-REP Roasting
  • Network Pivoting
  • Workshop: Active Directory Attack Simulation
• Day3: Module 5 : Post-Exploitation & Persistence (ช่วงบ่าย)
  • Command & Control (C2)
  • Persistence Techniques
  • Data Exfiltration
  • Anti-Forensics (แนวคิด)
  • Workshop: Enterprise Attack Simulation
• Day4: Module 6 : Advanced Web Application Hacking
  • Advanced OWASP Top 10
  • Authentication & Authorization Bypass
  • Server Misconfiguration
  • API Security Testing (REST / GraphQL)
  • Business Logic Testing
  • Workshop: Web Application & API Penetration Testing
• Day5: Module 7 : Reporting & Debriefing Capstone Red Team Exercise (ช่วงเช้า)
  • Professional Red Team Report
  • Executive Summary
  • Risk Rating (CVSS / Business Impact)
  • MITRE ATT&CK Mapping
  • Capstone Exercise (ช่วงบ่าย)
  • Reconnaissance
  • Initial Access
  • Privilege Escalation
  • Lateral Movement
  • Post Exploitation
  • จัดทำรายงาน
  • นำเสนอผลการทดสอบต่อผู้บริหาร (Executive Presentation)