Kali Linux Red Team Toolkit — Advanced Attack Framework

Red Team Toolkit on Kali Linux

Red teaming simulates a real-world advanced persistent threat (APT). It's the most sophisticated form of security testing.

Command & Control (C2) Frameworks

• Metasploit: The classic — free and powerful
• Sliver: Modern C2 written in Go
• Mythic: Multi-platform C2 with web UI
• Havoc: Advanced C2 with evasion built-in

Initial Access Techniques

• Spear phishing with macro-enabled documents
• Watering hole attacks on company resources
• USB drop attacks with Rubber Ducky payloads
• Supply chain compromise

Lateral Movement

# Pass-the-Hash
crackmapexec smb 10.10.10.0/24 -u admin -H  --exec-method smbexec

# PsExec equivalent
impacket-psexec admin@10.10.10.5 -hashes :ntlm_hash

# WinRM
evil-winrm -i 10.10.10.5 -u admin -p password

Persistence Mechanisms

• Registry run keys
• Scheduled tasks
• WMI event subscriptions
• DLL hijacking
• Golden Ticket (Kerberos)

Red Team vs Pentest

🔥 Build your red team skills at Code Hacker →