# \[RTG\] Red Team General **URL:** \ **Category:** InfoSec\ **Created:** [February 13, 2018, 12:22am UTC](https://forum.0cd.xyz/t/rtg-red-team-general/188 "2018-02-13T00:22:05Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![SgtAwesomesauce](https://forum.0cd.xyz/user_avatar/forum.0cd.xyz/sgtawesomesauce/32/1428_2.png) [@SgtAwesomesauce](https://forum.0cd.xyz/u/SgtAwesomesauce)\ **Post date:** [February 13, 2018, 12:22am UTC](https://forum.0cd.xyz/t/rtg-red-team-general/188/1 "2018-02-13T00:22:05Z")
Welcome to Red Team General! Here we discuss everything relating to offensive security, pentesting, social engineering and anything else you that might fit the bill! # 1. Where to start? If you’re new and looking to get started, feel free to post! If you’re looking for resources, there are a few listed below. Keep in mind that being a good sysadmin does not make you a good pentester. Everyone starts at zero! # 2. Certifications ### 2.1. [CEH - Certified Ethical Hacker](https://www.eccouncil.org/programs/certified-ethical-hacker-ceh/) Good resume buff, not great for much else. ### 2.2 ECSA - EC-Council Certified Security Analyst You’ll have to know what you’re doing, this one’s the next step from CEH. ### 2.3. LPT - Licensed Penetration Tester This one’s more focused on documentation and ethics. Worth mentioning, but not super valuable. Builds on ECSA. ### 2.4. [OSCP - Offensive Security Certified Professional](https://www.offensive-security.com/information-security-certifications/oscp-offensive-security-certified-professional/) This is the one you want. 24 hours to own 5 systems and another 24 hours to write a detailed report. Not easy, very rewarding. # 3. Resources ## 3.1. Guides/information #### 3.1.1. [http://www.abatchy.com/2017/03/how-to-prepare-for-pwkoscp-noob](http://www.abatchy.com/2017/03/how-to-prepare-for-pwkoscp-noob) Zero to hero guide for OSCP. More of an outline, points you in the right direction. #### 3.1.2. [http://niiconsulting.com/checkmate/2017/06/a-detail-guide-on-oscp-preparation-from-newbie-to-oscp/](http://niiconsulting.com/checkmate/2017/06/a-detail-guide-on-oscp-preparation-from-newbie-to-oscp/) Another OSCP outline. #### 3.1.3 [https://www.cybrary.it/0p3n/prep-guide-offsecs-pwkoscp/](https://www.cybrary.it/0p3n/prep-guide-offsecs-pwkoscp/) Cybrary is a good resource for all things IT. Free courses, not all that complete though. ## 3.2. Tools #### 3.2.1. [Kali Linux](https://www.kali.org/) Your one stop shop for pentesting. #### 3.2.2 [BackBox](https://backbox.org/linux) Pentesting Distro, similar to Kali, haven’t personally used it. #### 3.2.3 [Parrot](https://www.parrotsec.org/) Security focused Linux distro, also provides a lot of pentesting/forensics tools. #### 3.2.4. [Metasploit](https://www.metasploit.com) Starting point for most noobs, swiss army knife, automates the hard stuff. Freemium model, community variant should be enough for anyone. #### 3.2.5. [Burp Suite](https://portswigger.net/burp) Web Exploitation toolkit. Freemium model. Helps automate most things. ## 3.3. Youtube #### 3.3.1. [IppSec - youtube](https://www.youtube.com/channel/UCa6eh7gCkpPo5XXUDfygQQA) Walkthroughs of retired HTB vms. #### 3.3.2. [Hak5 - youtube](https://www.youtube.com/hak5) They’re the ones behind the Rubber Ducky, Pineapple, Lan Turtle, Packet Squirrel and Bash Bunny. All this can be found at [https://hakshop.com](https://hakshop.com) #### 3.3.3. [LiveOverflow - youtube](https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w) Binary exploitation, web hacking, angular security. ## 3.4. Talks #### 3.4.1. Jason E Street One of my favorites. This guy is the epitome of the plebian hacker. Talks in the spoiler. ## 3.5. CTFs #### 3.5.1. [Hack The Box](https://www.hackthebox.eu/) Need to hack the invite code. Hard enough to keep the skids out. #### 3.5.2. [Over The Wire Wargames](http://overthewire.org/wargames) Simple CTF wargames. Recommended order: 1. Bandit 2. Natas 3. Leviathan 4. Narnia 5. Behemoth 6. Krypton 7. Utumno 8. Maze 9. all the rest, doesn’t really matter. #### 3.5.3. [VulnHub](https://vulnhub.com/) Pre-broken images to have your fun with. I recommend Mr Robot or any of the kioptix images, so far. Found a good resource? @ me and I’ll add it to the OP! * * * Responsibility disclaimer: All this can add up to a person who’s able to do really bad things. Please only break into networks on which you’re authorized to do so. If we find out you’re breaking into networks or systems that you aren’t authorized for, you’ll be escorted off the premises by security. ---
**Author:** ![Dje4321](https://forum.0cd.xyz/user_avatar/forum.0cd.xyz/dje4321/32/7355_2.png) [@Dje4321](https://forum.0cd.xyz/u/Dje4321)\ **Post date:** [February 13, 2018, 12:24am UTC](https://forum.0cd.xyz/t/rtg-red-team-general/188/2 "2018-02-13T00:24:03Z")
Is another youtuber that does hacking stuff. Has a tutorial on binary exploitation > **[LiveOverflow](https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w)** > > just a wannabe hacker... -=\[❤️ Support me \]=- Patreon per Video: https://www.patreon.com/join/liveoverflow YouTube Membership per Month: https://www.youtube... ---
**Author:** ![SgtAwesomesauce](https://forum.0cd.xyz/user_avatar/forum.0cd.xyz/sgtawesomesauce/32/1428_2.png) [@SgtAwesomesauce](https://forum.0cd.xyz/u/SgtAwesomesauce)\ **Post date:** [February 13, 2018, 12:31am UTC](https://forum.0cd.xyz/t/rtg-red-team-general/188/3 "2018-02-13T00:31:56Z")
I guess I should start off by asking if anyone else is on HTB. I got in last week, so I haven’t had a whole lot of time to do work on it yet. Hoping to get a KVM switch in tomorrow that will allow me to do more. I’m also working on getting a small lab up. Hopefully it will be up shortly. Who knows how long that will actually take though. ---
**Author:** ![Michael](https://forum.0cd.xyz/user_avatar/forum.0cd.xyz/michael/32/9677_2.png) [@Michael](https://forum.0cd.xyz/u/Michael)\ **Post date:** [February 13, 2018, 12:46am UTC](https://forum.0cd.xyz/t/rtg-red-team-general/188/4 "2018-02-13T00:46:05Z")
Great topic @SgtAwesomesauce. I will have to check out some of these sources. have dabbled in pen-testing before mostly with WiFi and some network stuff on my own hardware but overall still fairly new to it. Looking forward to where this goes and will definitely report back with my exploits in this. ---
**Author:** ![SgtAwesomesauce](https://forum.0cd.xyz/user_avatar/forum.0cd.xyz/sgtawesomesauce/32/1428_2.png) [@SgtAwesomesauce](https://forum.0cd.xyz/u/SgtAwesomesauce)\ **Post date:** [February 13, 2018, 12:49am UTC](https://forum.0cd.xyz/t/rtg-red-team-general/188/5 "2018-02-13T00:49:11Z")
Glad to hear you like it. If you have any questions, definitely hit me up. I’m far from a pro, but I’m aiming to get some certs by years end. ---
**Author:** ![Michael](https://forum.0cd.xyz/user_avatar/forum.0cd.xyz/michael/32/9677_2.png) [@Michael](https://forum.0cd.xyz/u/Michael)\ **Post date:** [February 13, 2018, 12:50am UTC](https://forum.0cd.xyz/t/rtg-red-team-general/188/6 "2018-02-13T00:50:22Z")
Thank you can count on it. ---
**Author:** ![Dje4321](https://forum.0cd.xyz/user_avatar/forum.0cd.xyz/dje4321/32/7355_2.png) [@Dje4321](https://forum.0cd.xyz/u/Dje4321)\ **Post date:** [February 13, 2018, 12:55am UTC](https://forum.0cd.xyz/t/rtg-red-team-general/188/7 "2018-02-13T00:55:26Z")
Ive got some experince in all 3 types of hacking black,gray and white and i want to continue learning. Need to get a dedicated laptop that is good to go for a dedicated thing. Might just keep kali on its own partition with my new laptop ---
**Author:** ![SgtAwesomesauce](https://forum.0cd.xyz/user_avatar/forum.0cd.xyz/sgtawesomesauce/32/1428_2.png) [@SgtAwesomesauce](https://forum.0cd.xyz/u/SgtAwesomesauce)\ **Post date:** [February 13, 2018, 12:57am UTC](https://forum.0cd.xyz/t/rtg-red-team-general/188/8 "2018-02-13T00:57:26Z")
~~One~~ Two things to note: I’ve had difficulty dual-booting kali with Solus, Pop OS and Fedora. Only ever tested UEFI, so I can’t say for sure if it’s a uefi or a Kali issue. I just gave up and left my elitebook with Kali installed. Also, they removed the broadcom STA drivers from the repo, so you’re SOL if you want to use them. ---
**Author:** ![Dje4321](https://forum.0cd.xyz/user_avatar/forum.0cd.xyz/dje4321/32/7355_2.png) [@Dje4321](https://forum.0cd.xyz/u/Dje4321)\ **Post date:** [February 13, 2018, 1:00am UTC](https://forum.0cd.xyz/t/rtg-red-team-general/188/9 "2018-02-13T01:00:56Z")
Ive never had a issue with kali linux but its been a few years since ive used it. ---
**Author:** ![Michael](https://forum.0cd.xyz/user_avatar/forum.0cd.xyz/michael/32/9677_2.png) [@Michael](https://forum.0cd.xyz/u/Michael)\ **Post date:** [February 13, 2018, 1:00am UTC](https://forum.0cd.xyz/t/rtg-red-team-general/188/10 "2018-02-13T01:00:58Z")
neat keeping kali on a separate partition is a pretty good idea. I’m not sure what approach I’ll take with this, In the past I had kali on a usb flash drive but thinking about having a dedicated kali install on a portable ssd attached to a sata-to-usb adapter instead so I can switch it between my desktop/laptop or whatever machine I want and still get decent performance. ---
**Author:** ![SgtAwesomesauce](https://forum.0cd.xyz/user_avatar/forum.0cd.xyz/sgtawesomesauce/32/1428_2.png) [@SgtAwesomesauce](https://forum.0cd.xyz/u/SgtAwesomesauce)\ **Post date:** [February 13, 2018, 1:02am UTC](https://forum.0cd.xyz/t/rtg-red-team-general/188/11 "2018-02-13T01:02:15Z")
General rule of thumb: either run kali in a VM, or run it on a machine you’re willing to have compromised. Especially if you’re taking part in a CTF. You never know if someone’s going to be watching for a connection to put a backdoor on your system. ---
**Author:** ![Michael](https://forum.0cd.xyz/user_avatar/forum.0cd.xyz/michael/32/9677_2.png) [@Michael](https://forum.0cd.xyz/u/Michael)\ **Post date:** [February 13, 2018, 1:03am UTC](https://forum.0cd.xyz/t/rtg-red-team-general/188/12 "2018-02-13T01:03:50Z")
Good to know. I might stick to using it in VMs in that case. ---
**Author:** ![SgtAwesomesauce](https://forum.0cd.xyz/user_avatar/forum.0cd.xyz/sgtawesomesauce/32/1428_2.png) [@SgtAwesomesauce](https://forum.0cd.xyz/u/SgtAwesomesauce)\ **Post date:** [February 13, 2018, 1:05am UTC](https://forum.0cd.xyz/t/rtg-red-team-general/188/13 "2018-02-13T01:05:01Z")
Yeah, I have a laptop that I don’t mind wiping every now and again, so I use that one. It’s served me well but I happen to be one of those lucky bastards surrounded by hardware, so I understand if you don’t have access to dedicated hardware. ---
**Author:** ![Michael](https://forum.0cd.xyz/user_avatar/forum.0cd.xyz/michael/32/9677_2.png) [@Michael](https://forum.0cd.xyz/u/Michael)\ **Post date:** [February 13, 2018, 1:09am UTC](https://forum.0cd.xyz/t/rtg-red-team-general/188/14 "2018-02-13T01:09:40Z")
Well I still have my old 4690k machine I could use for that but also want kali on something portable for when I’ve got no access to my desktop, only device I have is the laptop I’m currently in the process of fixing but it’ll be my main travel device. In future I might see if I can pickup a fairly cheap laptop for messing around with. ---
**Author:** ![SgtAwesomesauce](https://forum.0cd.xyz/user_avatar/forum.0cd.xyz/sgtawesomesauce/32/1428_2.png) [@SgtAwesomesauce](https://forum.0cd.xyz/u/SgtAwesomesauce)\ **Post date:** [February 13, 2018, 1:13am UTC](https://forum.0cd.xyz/t/rtg-red-team-general/188/15 "2018-02-13T01:13:42Z")
[https://www.amazon.com/HP-EliteBook-840-Notebook-Professional/dp/B01LXP2XW8/ref=sr\_1\_2?ie=UTF8&qid=1518484337&sr=8-2&keywords=elitebook+840](https://www.amazon.com/HP-EliteBook-840-Notebook-Professional/dp/B01LXP2XW8/ref=sr_1_2?ie=UTF8&qid=1518484337&sr=8-2&keywords=elitebook+840) I’ve got the G3 model of this. Damn good price if you ask me. Clit mouse, intel wireless, low-res screen is a minus, but that’s what you get for $300. You’ll be spending most of your time in a terminal anyways, so it’s not a bad option. ---
**Author:** ![SgtAwesomesauce](https://forum.0cd.xyz/user_avatar/forum.0cd.xyz/sgtawesomesauce/32/1428_2.png) [@SgtAwesomesauce](https://forum.0cd.xyz/u/SgtAwesomesauce)\ **Post date:** [February 13, 2018, 1:15am UTC](https://forum.0cd.xyz/t/rtg-red-team-general/188/16 "2018-02-13T01:15:45Z")
I may have just talked myself into buying a $300 laptop. LOL ---
**Author:** ![Michael](https://forum.0cd.xyz/user_avatar/forum.0cd.xyz/michael/32/9677_2.png) [@Michael](https://forum.0cd.xyz/u/Michael)\ **Post date:** [February 13, 2018, 1:17am UTC](https://forum.0cd.xyz/t/rtg-red-team-general/188/17 "2018-02-13T01:17:16Z")
Thats not too bad, I’ll have to see what I can find in my area. realistically I’ll likely end up getting a better laptop than my current one as my main and use the old one for kali instead, its from 2010 and fairly dated ---
**Author:** ![SgtAwesomesauce](https://forum.0cd.xyz/user_avatar/forum.0cd.xyz/sgtawesomesauce/32/1428_2.png) [@SgtAwesomesauce](https://forum.0cd.xyz/u/SgtAwesomesauce)\ **Post date:** [February 13, 2018, 1:19am UTC](https://forum.0cd.xyz/t/rtg-red-team-general/188/18 "2018-02-13T01:19:03Z")
Ah, that’s a good idea. Kali really doesn’t need a ton of horsepower. It can run on lxde (or xfce, I always confuse those two), so it’s not super demanding out of the box, and the only time you’ll ever need horsepower is when you’re bruteforcing, but you should really SSH into a machine that has a GPU for that. ---
**Author:** ![Dje4321](https://forum.0cd.xyz/user_avatar/forum.0cd.xyz/dje4321/32/7355_2.png) [@Dje4321](https://forum.0cd.xyz/u/Dje4321)\ **Post date:** [February 13, 2018, 1:22am UTC](https://forum.0cd.xyz/t/rtg-red-team-general/188/19 "2018-02-13T01:22:08Z")
or just rent a VM designed for that. ---
**Author:** ![SgtAwesomesauce](https://forum.0cd.xyz/user_avatar/forum.0cd.xyz/sgtawesomesauce/32/1428_2.png) [@SgtAwesomesauce](https://forum.0cd.xyz/u/SgtAwesomesauce)\ **Post date:** [February 13, 2018, 1:22am UTC](https://forum.0cd.xyz/t/rtg-red-team-general/188/20 "2018-02-13T01:22:54Z")
Those are expensive, but yeah. Since I already run linux on the system with a 1070, I just SSH to that and I’ve manually installed jumbo john. [Next page](https://forum.0cd.xyz/t/rtg-red-team-general/188.md?page=2)