red-team-tactics

原文涵盖的主题

• Red Team Tactics
• 1. MITRE ATT&CK Phases
• Attack Lifecycle
• Phase Objectives
• 2. Reconnaissance Principles
• Passive vs Active
• Information Targets
• 3. Initial Access Vectors

Adversary simulation principles based on MITRE ATT&CK framework. -- | Phase | Objective | |-------|-----------| | Recon | Map attack surface | | Initial Access | Get first foothold | | Execution | Run code on target | | Persistence | Survive reboots | | Privilege Escalation | Get admin/root | | Defense Evasion | Avoid detection | | Credential Access | Harvest credentials | | Discovery | Map internal network | | Lateral Movement | Spread to other systems | | Collection | Gather target data | | C2 | Maintain command channel | | Exfiltration | Extract data | -- | Type | Trade-off | |------|-----------| | Passive | No target contact, limited info | | Active | Direct contact, more detection risk | | Category | Value | |----------|-------| | Technology stack | Attack vector selection | | Employee info | Social engineering | | Network ranges | Scanning scope | | Third parties | Supply chain attack | -- | Vector | When to Use | |--------|-------------| | Phishing | Human target, email access | | Public exploits | Vulnerable services exposed | | Valid credentials | Leaked or cracked | | Supply chain | Third-party access | -- | Check | Opportunity | |-------|-------------| | Unquoted service

这里只展示节选，请以完整原文和当前要求为准。