Red Team Tactics

A structured reference for penetration testing built around the MITRE ATT&CK framework. Covers the full attack lifecycle from reconnaissance through exfiltration, with specific guidance on privilege escalation checks for Windows and Linux, Active Directory attacks like Kerberoasting and DCSync, and defense evasion techniques. The reporting section is solid, emphasizing detection gaps and where defenses failed. Useful for keeping your red team exercises methodical rather than just throwing exploits at things. The ethical boundaries and operational security notes are important reminders that this is about improving defenses, not causing chaos.

skills.sh installs: 119
GitHub stars: 7.6K
last updated: Jun 3, 2026

View on GitHub

Install

$ npx -y skills add vudovn/antigravity-kit --skill red-team-tactics --agent claude-code

Installs into .claude/skills of the current project.

Files

Red Team Tactics

Adversary simulation principles based on MITRE ATT&CK framework.

1. MITRE ATT&CK Phases

Attack Lifecycle

RECONNAISSANCE → INITIAL ACCESS → EXECUTION → PERSISTENCE
       ↓              ↓              ↓            ↓
   PRIVILEGE ESC → DEFENSE EVASION → CRED ACCESS → DISCOVERY
       ↓              ↓              ↓            ↓
LATERAL MOVEMENT → COLLECTION → C2 → EXFILTRATION → IMPACT

Phase Objectives

Phase	Objective
Recon	Map attack surface
Initial Access	Get first foothold
Execution	Run code on target
Persistence	Survive reboots
Privilege Escalation	Get admin/root
Defense Evasion	Avoid detection
Credential Access	Harvest credentials
Discovery	Map internal network
Lateral Movement	Spread to other systems
Collection	Gather target data
C2	Maintain command channel
Exfiltration	Extract data

Red Team Tactics

Install

Files

Red Team Tactics

1. MITRE ATT&CK Phases

Attack Lifecycle

Phase Objectives

2. Reconnaissance Principles

Passive vs Active

Details

More from vudovn/antigravity-kit

Recommended