skills.rest
virahitvin8
virahitvin8COMMUNITY
Explore all skills by this author →
GitHub

red-team-tactics

Guides adversary simulation and penetration testing using MITRE ATT&CK attack phases.

2|Updated May 30, 2026
Search Tags:#penetration testing#privilege escalation#red team#adversary simulation#mitre att&ck#defense evasion#active directory
One-click install
npx skills add https://github.com/virahitvin8/crafty-gis --skill red-team-tactics-virahitvin8
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: red-team-tactics
Source: https://github.com/virahitvin8/crafty-gis/tree/main/GIT_STAR/.agent/skills/red-team-tactics
Command: npx skills add https://github.com/virahitvin8/crafty-gis --skill red-team-tactics-virahitvin8

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Security professionals need a structured methodology for planning and executing authorized red team exercises, and this Skill provides a phase-by-phase reference based on the MITRE ATT&CK framework. ## Core Features & Use Cases - Attack Lifecycle Guidance: Covers all MITRE ATT&CK phases from reconnaissance through exfiltration and impact, with objectives for each phase. - Technique Selection: Provides decision tables for initial access vectors, privilege escalation checks on Windows and Linux, defense evasion techniques, and Active Directory attacks like Kerberoasting and DCSync. - Reporting and Ethics: Includes guidance on documenting attack narratives, identifying detection gaps, and maintaining ethical boundaries during engagements. - Use Case: During an authorized penetration test, use this Skill to plan the engagement methodology, select appropriate privilege escalation checks for a Linux target, and structure the final report with detection gap analysis. ## Quick Start Ask the AI to outline a red team engagement plan for a Windows Active Directory environment following MITRE ATT&CK phases.

Frequently Asked Questions about red-team-tactics

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I plan a red team exercise using MITRE ATT&CK?▼

Plan a red team exercise by following the MITRE ATT&CK attack lifecycle: reconnaissance, initial access, execution, persistence, privilege escalation, defense evasion, and lateral movement. Define objectives for each phase and select techniques matching your target environment.

What are the phases of the MITRE ATT&CK attack lifecycle?▼

The lifecycle covers reconnaissance, initial access, execution, persistence, privilege escalation, defense evasion, credential access, discovery, lateral movement, collection, command and control, exfiltration, and impact. Each phase has distinct objectives, from mapping the attack surface to extracting data.

How do I check for privilege escalation paths on Linux?▼

Check for SUID binaries that execute as the file owner, sudo misconfigurations allowing command execution, kernel vulnerabilities, and writable cron job scripts. Each represents a potential path from standard user to root access.

What is the difference between Kerberoasting and AS-REP Roasting?▼

Kerberoasting targets service account passwords by requesting service tickets and cracking them offline. AS-REP Roasting targets accounts configured without Kerberos pre-authentication, allowing attackers to request encrypted data for offline cracking.

When should red team techniques not be used?▼

Red team techniques should only be used within authorized engagement scope. Never destroy production data, cause denial of service unless explicitly scoped, access systems beyond proof of concept, or retain sensitive data after the engagement.

Related Skills

Explore More Software Engineering Skills→
braydos-hbraydos-h
4

executing-red-team-engagement-planning

Generates red team engagement plans, rules of engagement, and MITRE ATT&CK attack plans.

Community
Advanced
daimlerdoublesix2daimlerdoublesix2

threat-mitigation-mapping

Map detected threats to relevant security controls for risk-based prioritization.

Community
Advanced
xalgordxalgord
954

performing-purple-team-exercise

Coordinates red team adversary emulation with blue team detection validation using MITRE ATT&CK-mapped scenarios.

Community
Advanced
LerianStudioLerianStudio
205

ops-security-audit

Automate infrastructure security audits with phased scanning and compliance mapping.

Official
Advanced