Who Am I

• Certified Ethical Hacker
• Certified AppSec Penetration Tester
• Cybersecurity Instructor
• CTO at Hackersdaddy
• CTF Content Creator

What is Red Teaming?

A Red Team is a group of ethical hackers who simulate real-world attacks on a company's network to identify vulnerabilities and improve security. They use various techniques to breach defenses and steal data, helping organizations strengthen their security posture.

Penetration Testing

Scope: Focused on specific systems or networks.

Surprise Factor: Often known to the organization beforehand.

Goal: Identify and document vulnerabilities.

Timeframe: Typically shorter, time-bound engagements.

Methodology: Follows a structured approach.

Red Teaming

Scope: Simulates real-world attacks against the entire organization.

Surprise Factor: Often conducted stealthily, surprising the organization.

Goal: Test the organization's overall security posture and response capabilities.

Timeframe: Can be longer, extending over weeks or even months.

Methodology: More flexible and adaptive, mimicking real-world attacker tactics.

Do It Accordingly

• Basic Scan
• Service Version Scan
• Scanning with nmap scripts
• Validate by interacting with each port manually
• Perform your attack

Samples from session

hydra -l testuser -P /usr/share/wordlists/rockyou.txt 13.126.151.70 mysql

Samples from session

Interact with the mysql remotely

Samples from session

Getting web users details

What to do next?

Try to crack the hash, or brute force with the common wordlists to access the johnny user account and move on with the steps explained in the session