100 Days of Red Team
Subscribe
Sign in
Home
Red Team Training
GitHub
YouTube
Uday Mittal's Substack
About
Latest
Top
Discussions
Using Velociraptor as C2
Velociraptor repurposed as C2: explore its powers, risks, and real-world misuse in red team operations.
21 hrs ago
•
Uday Mittal
1
Share this post
100 Days of Red Team
Using Velociraptor as C2
Copy link
Facebook
Email
Notes
More
Misusing SaaS app integrations for persistence
Learn how attackers abuse SaaS integrations for hidden persistence and re-entry into enterprise environments.
Aug 28
•
Uday Mittal
1
Share this post
100 Days of Red Team
Misusing SaaS app integrations for persistence
Copy link
Facebook
Email
Notes
More
Red Team perspective on AWS VPC Lattice
Exploring AWS VPC Lattice and how attackers could abuse it for stealth, movement, and hidden access paths.
Aug 27
•
Uday Mittal
1
Share this post
100 Days of Red Team
Red Team perspective on AWS VPC Lattice
Copy link
Facebook
Email
Notes
More
June 2025
The Art of Pretext: Building better backstories for social engineering - Part 3
Learn how to create research-backed, believable pretexts for social engineering ops.
Jun 15
•
Uday Mittal
Share this post
100 Days of Red Team
The Art of Pretext: Building better backstories for social engineering - Part 3
Copy link
Facebook
Email
Notes
More
The Art of Pretext: Building better backstories for social engineering - Part 2
Explore the key elements of a strong pretext that help red teams create convincing and resilient personas.
Jun 14
•
Uday Mittal
1
Share this post
100 Days of Red Team
The Art of Pretext: Building better backstories for social engineering - Part 2
Copy link
Facebook
Email
Notes
More
The Art of Pretext: Building better backstories for social engineering - Part 1
Learn why strong pretexts are vital for social engineering success and discover reasons why certain pretexts fail.
Jun 2
•
Uday Mittal
Share this post
100 Days of Red Team
The Art of Pretext: Building better backstories for social engineering - Part 1
Copy link
Facebook
Email
Notes
More
Abusing the AWS metadata API for privilege escalation
Learn how to leverage the AWS Metadata API to extract IAM role credentials and escalate privileges after compromising an EC2 instance.
Jun 1
•
Uday Mittal
1
Share this post
100 Days of Red Team
Abusing the AWS metadata API for privilege escalation
Copy link
Facebook
Email
Notes
More
May 2025
Ghost in the cloud: Abusing AWS SSM sessions for covert access
Learn how red teamers can abuse AWS SSM Session Manager to gain shell access to EC2 instances without SSH, public IPs, or open ports and escalate…
May 31
•
Uday Mittal
Share this post
100 Days of Red Team
Ghost in the cloud: Abusing AWS SSM sessions for covert access
Copy link
Facebook
Email
Notes
More
Red Team Infrastructure - Configure a domain name and SSL certificate via Terraform
Learn how to map the redirector machine to a domain name and configure a valid SSL certificate via Terraform.
May 20
•
Uday Mittal
Share this post
100 Days of Red Team
Red Team Infrastructure - Configure a domain name and SSL certificate via Terraform
Copy link
Facebook
Email
Notes
More
Red Team Infrastructure - Deploying a redirector via Terraform
Learn how to deploy and configure a redirector machine in AWS via Terraform.
May 19
•
Uday Mittal
Share this post
100 Days of Red Team
Red Team Infrastructure - Deploying a redirector via Terraform
Copy link
Facebook
Email
Notes
More
Red Team Infrastructure - Deploying Havoc C2 via Terraform
Learn how to deploy Havoc C2 (team server and client) in AWS via Terraform.
May 17
•
Uday Mittal
2
Share this post
100 Days of Red Team
Red Team Infrastructure - Deploying Havoc C2 via Terraform
Copy link
Facebook
Email
Notes
More
Red team infrastructure - EC2 Windows Server deployment with Terraform
Learn how to deploy a Windows Server 2022 EC2 instance via Terraform and install additional tools such as WSL, Python, C# etc.
May 16
•
Uday Mittal
Share this post
100 Days of Red Team
Red team infrastructure - EC2 Windows Server deployment with Terraform
Copy link
Facebook
Email
Notes
More
Share
Copy link
Facebook
Email
Notes
More
This site requires JavaScript to run correctly. Please
turn on JavaScript
or unblock scripts