Individual skill
offensive-advanced-redteam
Comprehensive red team operations methodology covering full engagement lifecycle from planning through reporting. Addresses engagement scoping and rules of engagement negotiation, multi-tier C2 infrastructure design with redirectors and domain fronting, malleable traffic profiles and beacon tradecraft, OPSEC discipline including attribution avoidance and indicator management, EDR and AMSI evasion techniques using direct syscalls and unhooking, data collection with chain-of-custody controls, and structured reporting with purple team debrief workflows. Covers assumed-breach, external-to-internal, insider threat, and hybrid physical-cyber engagement scenarios with MITRE ATT&CK mapping throughout. Targets operators planning or executing adversary simulation engagements against mature defenders.
Skills/infrastructure/offensive-advanced-redteam/SKILL.md
Source commit a8de813edc9f66f60d44cfe42d47750e89d9930b
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Network or broad shell
- Last checked
- Nov 2, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 10,477
- Repository last updated
- Oct 12, 2026
- License
- MIT
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- claude-ai Repository topic
- claude-skills Repository topic
- redteam Repository topic
- redteam-tools Repository topic
- skills Repository topic
- claude-pt Repository topic
- design Derived category
- operations Derived category
- data Derived category
- devops Derived category
- security Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 27,594 bytesSKILL.mdcore · 27,594 bytesSKILL.mdcore · 27,594 bytesSKILL.mdcore · 27,594 bytesSKILL.mdcore · 27,594 bytesSKILL.mdcore · 27,594 bytesSKILL.mdcore · 27,594 bytesSKILL.mdcore · 27,594 bytesSKILL.mdcore · 27,594 bytesSKILL.mdcore · 27,594 bytesSKILL.mdcore · 27,594 bytesSKILL.mdcore · 27,594 bytesSKILL.mdcore · 27,594 bytes
Read excerpt
# Advanced Red Team Operations
Red team engagements simulate real-world adversaries against an organization's people,
processes, and technology. Unlike penetration tests that maximize vulnerability discovery
in a fixed scope, red team operations test detection and response capabilities by pursuing
specific objectives while evading defenders. You operate under rules of engagement that
define what is in bounds, and every action you take must be deliberate, documented, and
reversible. This skill covers the full engagement lifecycle from initial planning through
final debrief.
## Quick Workflow
1. Negotiate scope, rules of engagement, and deconfliction procedures with the client.
2. Build tiered attack infrastructure with redirectors, aged domains, and valid TLS.