Plan and execute real engagements: initial access, C2, persistence, privilege escalation, lateral movement and reporting, exactly as a working red team operator does.
Starting at $250 · Taught by industry-certified ThreatBlock instructors.
6 modules — tap any topic to expand the details.
One-time payment for full course access. Flexible EMI options available at checkout.

This is the first course that taught me to think about OPSEC, not just exploitation. The malleable C2 profile work alone was worth it.

The Active Directory week is brutal in the best way. Kerberoasting, BloodHound path finding and lateral movement finally came together as one coherent attack chain.

Running a full simulation from phishing to domain admin against a realistic lab was the closest thing to a real engagement I have done in training.

The reporting module is often skipped elsewhere, but here it was treated as the deliverable that actually matters. My debriefs are far sharper now.

EDR evasion and in-memory execution were taught with real depth. I walked away able to adapt rather than just copy a payload.

This is the first course that taught me to think about OPSEC, not just exploitation. The malleable C2 profile work alone was worth it.

The Active Directory week is brutal in the best way. Kerberoasting, BloodHound path finding and lateral movement finally came together as one coherent attack chain.

Running a full simulation from phishing to domain admin against a realistic lab was the closest thing to a real engagement I have done in training.

The reporting module is often skipped elsewhere, but here it was treated as the deliverable that actually matters. My debriefs are far sharper now.

EDR evasion and in-memory execution were taught with real depth. I walked away able to adapt rather than just copy a payload.

EDR evasion and in-memory execution were taught with real depth. I walked away able to adapt rather than just copy a payload.

The reporting module is often skipped elsewhere, but here it was treated as the deliverable that actually matters. My debriefs are far sharper now.

Running a full simulation from phishing to domain admin against a realistic lab was the closest thing to a real engagement I have done in training.

The Active Directory week is brutal in the best way. Kerberoasting, BloodHound path finding and lateral movement finally came together as one coherent attack chain.

This is the first course that taught me to think about OPSEC, not just exploitation. The malleable C2 profile work alone was worth it.

EDR evasion and in-memory execution were taught with real depth. I walked away able to adapt rather than just copy a payload.

The reporting module is often skipped elsewhere, but here it was treated as the deliverable that actually matters. My debriefs are far sharper now.

Running a full simulation from phishing to domain admin against a realistic lab was the closest thing to a real engagement I have done in training.

The Active Directory week is brutal in the best way. Kerberoasting, BloodHound path finding and lateral movement finally came together as one coherent attack chain.

This is the first course that taught me to think about OPSEC, not just exploitation. The malleable C2 profile work alone was worth it.
The course runs for 40 Hours.
Classes are taught live online by ThreatBlock instructors.
Each batch is capped at 18 learners, so every learner gets time with the instructor.
The course is set at Advanced level.
Prepares you for hands-on red team certifications such as the Certified Red Team Operator (CRTO).
You work hands-on with Cobalt Strike, Mythic, Sliver, BloodHound, Mimikatz and Rubeus.
The course is organised into 6 modules: Red Team Planning & Engagement Design; Initial Access; Command & Control; Persistence & Privilege Escalation; Active Directory Attacks & Lateral Movement; Exfiltration, Evasion & Reporting.
{{ heroSubtitle }}
Starting at {{ geoPrice }} · {{ heroCertsEl }}
Designed for learners at every stage of their journey.
{{ curriculumIntro }}
{{ r.text }}
{{ r.text }}
The course runs for 40 Hours.
Classes are taught live online by ThreatBlock instructors.
Each batch is capped at 18 learners, so every learner gets time with the instructor.
The course is set at Advanced level.
Prepares you for hands-on red team certifications such as the Certified Red Team Operator (CRTO).
You work hands-on with Cobalt Strike, Mythic, Sliver, BloodHound, Mimikatz and Rubeus.
The course is organised into 6 modules: Red Team Planning & Engagement Design; Initial Access; Command & Control; Persistence & Privilege Escalation; Active Directory Attacks & Lateral Movement; Exfiltration, Evasion & Reporting.
Your enrollment for {{ courseName }} is confirmed.
Payment ID: {{ paymentId }}
Our executive will reach out to you shortly.
Share your details to proceed with enrollment.