Logo
Advanced Live Course

Run Full-Scope Adversary Simulations.

Plan and execute real engagements: initial access, C2, persistence, privilege escalation, lateral movement and reporting, exactly as a working red team operator does.

Watch Free Demo

Starting at $250 · Taught by industry-certified ThreatBlock instructors.

Trusted by teams at
South FloridaSynackLufthansaBooking HoldingsHCL TechWiproMicrosoftSouth FloridaSynackLufthansaBooking HoldingsHCL TechWiproMicrosoft
Duration: 40 Hours
Level: Advanced
Batch: Max 18 Learners
Mode: Online Live

What You'll Learn

Red Team Planning & Engagement Design
The difference between a vulnerability assessment, a penetration test and a red team adversary simulation. Writing rules of engagement, defining objectives and success criteria, and aligning emulation to threat intelligence using the MITRE ATT&CK framework. Operational security principles and infrastructure planning before a single packet leaves the attacker box.
Initial Access
Developing and delivering payloads that survive modern email and endpoint controls. Spear-phishing with malicious documents, macros, HTML smuggling and LNK files, plus pretext design for the human element. Weaponising and obfuscating an implant, then landing a reliable first foothold while minimising detection.
Command & Control
Standing up C2 infrastructure with frameworks such as Cobalt Strike, Mythic and Sliver. Configuring beacons, sleep and jitter, and malleable C2 profiles to blend callbacks into normal traffic. Using redirectors and domain fronting to protect the team server and keep operations resilient when a channel is burned.
Persistence & Privilege Escalation
Establishing persistence through scheduled tasks, services, registry run keys and startup locations while weighing the detection cost of each. Windows privilege escalation via misconfigured services, unquoted paths, token impersonation and UAC bypasses. Local enumeration to find the fastest, quietest path from standard user to SYSTEM.
Active Directory Attacks & Lateral Movement
Enumerating and attacking Active Directory with Kerberoasting, AS-REP roasting, and abuse of delegation. Credential theft with Mimikatz, then pass-the-hash and pass-the-ticket to reuse it. Mapping attack paths with BloodHound and moving laterally via WMI, WinRM and PsExec toward domain dominance and DCSync.
Exfiltration, Evasion & Reporting
Defeating or evading AV and EDR with in-memory execution, process injection and indicator removal. Staging and exfiltrating target data over covert channels while managing operational security throughout. Running the client debrief and writing the red team report: attack narrative, timeline, mapped ATT&CK techniques and prioritised, actionable remediation.
Course Curriculum

What you'll master.

6 modules — tap any topic to expand the details.

The difference between a vulnerability assessment, a penetration test and a red team adversary simulation. Writing rules of engagement, defining objectives and success criteria, and aligning emulation to threat intelligence using the MITRE ATT&CK framework. Operational security principles and infrastructure planning before a single packet leaves the attacker box.
Enroll Now
$250
Book your demo

One-time payment for full course access. Flexible EMI options available at checkout.

Reviews & Testimonial

Loved by hackers. Trusted by organizations.
Vikram Chauhan
Penetration Tester
★★★★★

This is the first course that taught me to think about OPSEC, not just exploitation. The malleable C2 profile work alone was worth it.

Ananya Ghosh
Offensive Security Engineer
★★★★★

The Active Directory week is brutal in the best way. Kerberoasting, BloodHound path finding and lateral movement finally came together as one coherent attack chain.

Harpreet Singh
Red Team Analyst
★★★★★

Running a full simulation from phishing to domain admin against a realistic lab was the closest thing to a real engagement I have done in training.

Meera Pillai
Security Consultant
★★★★★

The reporting module is often skipped elsewhere, but here it was treated as the deliverable that actually matters. My debriefs are far sharper now.

Sandeep Reddy
Senior Pentester
★★★★★

EDR evasion and in-memory execution were taught with real depth. I walked away able to adapt rather than just copy a payload.

Vikram Chauhan
Penetration Tester
★★★★★

This is the first course that taught me to think about OPSEC, not just exploitation. The malleable C2 profile work alone was worth it.

Ananya Ghosh
Offensive Security Engineer
★★★★★

The Active Directory week is brutal in the best way. Kerberoasting, BloodHound path finding and lateral movement finally came together as one coherent attack chain.

Harpreet Singh
Red Team Analyst
★★★★★

Running a full simulation from phishing to domain admin against a realistic lab was the closest thing to a real engagement I have done in training.

Meera Pillai
Security Consultant
★★★★★

The reporting module is often skipped elsewhere, but here it was treated as the deliverable that actually matters. My debriefs are far sharper now.

Sandeep Reddy
Senior Pentester
★★★★★

EDR evasion and in-memory execution were taught with real depth. I walked away able to adapt rather than just copy a payload.

Sandeep Reddy
Senior Pentester
★★★★★

EDR evasion and in-memory execution were taught with real depth. I walked away able to adapt rather than just copy a payload.

Meera Pillai
Security Consultant
★★★★★

The reporting module is often skipped elsewhere, but here it was treated as the deliverable that actually matters. My debriefs are far sharper now.

Harpreet Singh
Red Team Analyst
★★★★★

Running a full simulation from phishing to domain admin against a realistic lab was the closest thing to a real engagement I have done in training.

Ananya Ghosh
Offensive Security Engineer
★★★★★

The Active Directory week is brutal in the best way. Kerberoasting, BloodHound path finding and lateral movement finally came together as one coherent attack chain.

Vikram Chauhan
Penetration Tester
★★★★★

This is the first course that taught me to think about OPSEC, not just exploitation. The malleable C2 profile work alone was worth it.

Sandeep Reddy
Senior Pentester
★★★★★

EDR evasion and in-memory execution were taught with real depth. I walked away able to adapt rather than just copy a payload.

Meera Pillai
Security Consultant
★★★★★

The reporting module is often skipped elsewhere, but here it was treated as the deliverable that actually matters. My debriefs are far sharper now.

Harpreet Singh
Red Team Analyst
★★★★★

Running a full simulation from phishing to domain admin against a realistic lab was the closest thing to a real engagement I have done in training.

Ananya Ghosh
Offensive Security Engineer
★★★★★

The Active Directory week is brutal in the best way. Kerberoasting, BloodHound path finding and lateral movement finally came together as one coherent attack chain.

Vikram Chauhan
Penetration Tester
★★★★★

This is the first course that taught me to think about OPSEC, not just exploitation. The malleable C2 profile work alone was worth it.

Frequently Asked Questions

How long is the Red Teaming course?

The course runs for 40 Hours.

Is the course live or pre-recorded?

Classes are taught live online by ThreatBlock instructors.

How many learners are in each batch?

Each batch is capped at 18 learners, so every learner gets time with the instructor.

What level is the Red Teaming course?

The course is set at Advanced level.

Does the Red Teaming course prepare me for a certification?

Prepares you for hands-on red team certifications such as the Certified Red Team Operator (CRTO).

Which tools will I use?

You work hands-on with Cobalt Strike, Mythic, Sliver, BloodHound, Mimikatz and Rubeus.

What does the course cover?

The course is organised into 6 modules: Red Team Planning & Engagement Design; Initial Access; Command & Control; Persistence & Privilege Escalation; Active Directory Attacks & Lateral Movement; Exfiltration, Evasion & Reporting.

Logo
{{ heroBadge }}

{{ heroTitleLead }}{{ heroTitleAccent }}

{{ heroSubtitle }}

Watch Free Demo

Starting at {{ geoPrice }} · {{ heroCertsEl }}

Video unavailable
This video can't be played right now. Please try again later.
Trusted by teams at
{{ t }}
{{ f.iconEl }} {{ f.label }}: {{ f.value }}

What You'll Learn

{{ c.iconEl }}
{{ c.title }}
{{ c.desc }}
Audience

Who It's For

Designed for learners at every stage of their journey.

{{ c.iconEl }}
{{ c.title }}
{{ c.desc }}
Course Curriculum

What you'll master.

{{ curriculumIntro }}

{{ acc.content }}
Enroll Now
{{ geoPrice }}
Book your demo

{{ pricingNote }}

Reviews & Testimonial

Loved by hackers. Trusted by organizations.
{{ r.name }}
{{ r.role }}
★★★★★

{{ r.text }}

{{ r.name }}
{{ r.role }}
★★★★★

{{ r.text }}

Frequently Asked Questions

How long is the Red Teaming course?

The course runs for 40 Hours.

Is the course live or pre-recorded?

Classes are taught live online by ThreatBlock instructors.

How many learners are in each batch?

Each batch is capped at 18 learners, so every learner gets time with the instructor.

What level is the Red Teaming course?

The course is set at Advanced level.

Does the Red Teaming course prepare me for a certification?

Prepares you for hands-on red team certifications such as the Certified Red Team Operator (CRTO).

Which tools will I use?

You work hands-on with Cobalt Strike, Mythic, Sliver, BloodHound, Mimikatz and Rubeus.

What does the course cover?

The course is organised into 6 modules: Red Team Planning & Engagement Design; Initial Access; Command & Control; Persistence & Privilege Escalation; Active Directory Attacks & Lateral Movement; Exfiltration, Evasion & Reporting.

✓

Payment Successful!

Your enrollment for {{ courseName }} is confirmed.

Payment ID: {{ paymentId }}

✓

Thank you!

Our executive will reach out to you shortly.

Course enrollment

Enroll in {{ courseName }}

Share your details to proceed with enrollment.

{{ enrollError }}

Protected by reCAPTCHA. Google Privacy & Terms.