(Methodology)
Planning establishes the objectives, in-scope systems, approved techniques, safety controls, and points of contact. Scenarios are selected with the client and can be mapped to public frameworks such as MITRE ATT&CK where useful.
Execution follows the agreed rules of engagement, with monitoring and stop conditions in place. The debrief summarizes observed defensive gaps, supporting evidence, and improvements for detection and response.
(Tools & Resources)
Tool Category
Primary Software/Framework
Initial Access & Reconnaissance
Nmap, GoBuster, Maltego, Custom Phishing Kits
Post-Exploitation & C2
Cobalt Strike, C2 Matrix, Metasploit, PowerShell Empire
Active Directory / Lateral Movement
BloodHound, Responder, Impacket Suite, Mimikatz
Custom Development & Evasion
C/C++, Python, Shellcode Encoders, AV/EDR Bypass
Techniques