19/04/2026
Red Team Roadmap 🔴🎯
├── Foundations
│ ├── Networking Basics
│ │ ├── TCP/IP & Protocol Exploitation
│ │ ├── DNS & DHCP Attacks
│ │ ├── Subnetting & Network Mapping
│ │ └── Topology Enumeration
│ ├── Operating Systems
│ │ ├── Windows
│ │ │ ├── Active Directory Enumeration & Attacks
│ │ │ ├── Group Policy Exploitation
│ │ │ └── Event Log Evasion
│ │ └── Linux
│ │ ├── File Permission Exploits
│ │ ├── Syslog Manipulation
│ │ └── Scripting (Bash, Python, PowerShell)
│ └── Cybersecurity Core
│ ├── Attack Surface Analysis
│ ├── Threat Modeling (MITRE ATT&CK)
│ ├── Exploit Development Basics
│ └── Common Attack Vectors
├── Threat Intelligence
│ ├── OSINT
│ │ ├── Tools (Maltego, Recon-ng, SpiderFoot)
│ │ └── Data Sources (Shodan, Censys, WHOIS)
│ ├── Reconnaissance
│ │ ├── Passive & Active Recon
│ │ ├── Social Engineering Techniques
│ │ └── Target Profiling
│ └── IOCs Evasion
│ ├── Obfuscating IPs, Domains, Hashes
│ └── File Signature Manipulation
├── Offensive Operations
│ ├── Exploitation
│ │ ├── Tools (Metasploit, Cobalt Strike)
│ │ ├── Vulnerability Exploitation (Exploit-DB, Custom Exploits)
│ │ └── Payload Development
│ ├── Post-Exploitation
│ │ ├── Privilege Escalation
│ │ ├── Lateral Movement
│ │ └── Persistence Techniques
│ ├── Evasion
│ │ ├── AV/EDR Bypass
│ │ └── Log Evasion & Obfuscation
│ └── Network Attacks
│ ├── MITM (ARP Spoofing, SSL Stripping)
│ └── Protocol Exploitation
├── Vulnerability Exploitation
│ ├── Vulnerability Discovery
│ │ ├── Tools (Burp Suite, Nmap)
│ │ └── Manual Testing Techniques
│ ├── Exploit Development
│ │ ├── Writing Custom Exploits
│ │ └── Shellcode Basics
│ └── Configuration Exploits
│ ├── Misconfiguration Identification
│ └── Exploiting Weak Configurations
├── Identity & Access Attacks
│ ├── Credential Harvesting
│ │ ├── Phishing & Keylogging
│ │ └── Password Cracking (Hashcat, John the Ripper)
│ ├── Privilege Escalation
│ │ ├── Exploiting Misconfigured RBAC/ABAC
│ │ └── Bypassing MFA/SSO
│ └── Identity Spoofing
│ ├── Token Impersonation
│ └── Account Takeover
├── Network & Architecture Attacks
│ ├── Network Exploitation
│ │ ├── Bypassing VLANs & Firewalls
│ │ └── Attacking Microsegmentation
│ ├── Zero Trust Evasion
│ │ ├── Bypassing Identity Checks
│ │ └── Exploiting Trust Misconfigurations
│ └── Encryption Attacks
│ ├── Weak TLS/SSL Exploitation
│ └── VPN Vulnerabilities
├── Social Engineering
│ ├── Phishing Campaigns
│ │ ├── Email & Vishing Attacks
│ │ └── Payload Delivery
│ └── Pretexting
│ ├── Impersonation Techniques
│ └── Social Engineering Frameworks
├── Compliance & Governance Evasion
│ ├── Audit Evasion
│ │ ├── Bypassing Audit Trails
│ │ └── Log Tampering
│ └── Policy Exploitation
│ ├── Exploiting Weak Policies
│ └── Circumventing Compliance Controls
├── Advanced Offensive Techniques
│ ├── Advanced Persistence
│ │ ├── Rootkits & Backdoors
│ │ └── Living Off the Land (LotL)
│ ├── Adversary Simulation
│ │ ├── Purple Teaming
│ │ └── ATT&CK Framework Emulation
│ └── Custom Tooling
