Hands-on Labs
Red Team Lab — Advanced
Simulate a full Red Team attack: initial compromise, lateral movement in Active Directory, persistence and data exfiltration on a realistic enterprise environment.
Duration
10h
Level
Advanced
Category
Hands-on Labs
Prerequisites
Confirmed network and web pentesting experience. Knowledge of Active Directory, Metasploit, and C2 frameworks (Cobalt Strike or open-source equivalent).
What you will learn
- Plan and execute a full attack chain (kill chain) on an enterprise IT system
- Compromise an Active Directory via Kerberoasting, Pass-the-Hash and DCSync
- Establish stealthy persistence (backdoor, Golden Ticket, scheduled tasks)
- Exfiltrate sensitive data while bypassing security controls (EDR, SIEM)
- Document indicators of compromise (IOC) and write a Red Team report
Program
Initial access and internal reconnaissance
Spear phishing, exploitation of exposed services, BloodHound reconnaissance of the target Active Directory.
Privilege escalation in AD
Kerberoasting, AS-REP Roasting, delegation exploitation, Pass-the-Hash and Pass-the-Ticket.
Lateral movement
WMI, PsExec, WinRM — propagation through the IT system while maintaining a low profile to avoid detection.
Persistence and Command & Control
Backdoor implantation, Golden Ticket, Silver Ticket, C2 infrastructure with encrypted beacon.
Exfiltration and Red Team report
DNS/HTTPS exfiltration techniques, trace cleanup, final report with MITRE ATT&CK mapping.
Who is this for?
Why on CyberAct?
CyberAct's Red Team environment faithfully replicates an enterprise IT system with Active Directory, Exchange, file servers and Windows workstations, all on real VMs. The AI generator can adapt the scenario to your sector (banking, industry, healthcare) for directly transferable training.
Related content
Ready to train your teams?
Access the full CyberAct catalog on your dedicated platform.