Command and Control Courses and Certifications

BSidesLV

Rolling out the C2 - Modern Red Team Infrastructure in 2024

Explore modern red team infrastructure setup using Azure Cloud, Tailscale VPN, GitLab, and containerization. Learn to deploy secure C2 systems for effective penetration testing and security assessments.

• YouTube
• 54 minutes
• On-Demand
• Free Video

x33fcon

Hiding C2 Communications in Plain Sight Using Windows Memory Page Permissions

Discover advanced techniques for hiding C2 communications by exploiting Windows memory page permissions, with practical approaches to building modular and stealthy command-and-control systems.

• YouTube
• 36 minutes
• On-Demand
• Free Video

Ekoparty Security Conference

Decentralized C2 Using LogDrop - Exploiting Web Server Misconfigurations

Descubre LogDrop, una técnica innovadora para establecer canales de comando y control aprovechando errores de configuración en servidores web. Aprende sobre ciberseguridad y nuevas estrategias de Red Team.

• YouTube
• 25 minutes
• On-Demand
• Free Video

Offensive Security Engineering

716 ratings at Udemy

A hands on instructive course for what it takes to support offensive security operations.

• Udemy
• 4 hours 44 minutes
• On-Demand
• Paid Course

Infosec

Python for Command-and-control, Exfiltration and Impact

34 ratings at Coursera

This course covers python for Command-and-control, Exfiltration and Impact.

• Coursera
• 3 hours 21 minutes
• On-Demand
• Free Online Course (Audit)

Practical simulation of Lockheed Martin's Cyber Kill Chain™, covering attack phases and defense strategies. Gain hands-on experience in both offensive and defensive cybersecurity techniques.

• Cybrary
• 1-2 hours
• On-Demand
• Paid Course

SecurityFWD

Bypassing Endpoint Controls Using Office Macros - Techniques and Defenses

Explore techniques for bypassing endpoint controls using Office macros, including crafting malicious documents, establishing C&C channels, and evading detection through advanced attack methods.

• YouTube
• 48 minutes
• On-Demand
• Free Video

Security BSides San Francisco

So You Think You Can Secure Your Cloud - Red Team Engagements in GCP

Comprehensive guide to adversary simulations in GCP, covering initial access, persistence, privilege escalation, C2 using Google products, and data exfiltration techniques.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Amazon Web Services;  Amazon

IoT Learning Plan

Comprehensive IoT training covering device connectivity, data analysis, security, and advanced topics for various IT professionals seeking AWS IoT solutions.

• AWS Skill Builder
• 22 hours
• On-Demand
• Free Certificate

Command and Control with Merlin

In this course, you will learn Command And Control using Merlin. Merlin’s “magic” is in the usage of modules (for attack automation), HTTP/3 (for evading packet inspection), and Golang (for cross-compiling agents on multiple Operating Systems).

• Pluralsight
• 28 minutes
• On-Demand
• Free Trial Available

Command and Control with PoshC2

PoshC2 is a powerful tool that uses PowerShell to control a victim system toward furthering red teaming objectives beyond exploitation throughout the remaining life of an engagement. In this course, you will learn Command and Control using PoshC2.

• Pluralsight
• On-Demand
• Free Trial Available

Black Hat

Game of Chromes - Owning the Web with Zombie Chrome Extensions

Explore how malicious Chrome extensions can create botnets, distribute themselves, and exploit vulnerabilities. Learn about attack patterns, extension capabilities, and security measures.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Black Hat

Circumventing the Guardians - How the Security Features in State-of-the-Art TLS Inspection Solutions Can Be Exploited for Covert Data Exfiltration

Unveiling a stealthy data exfiltration method that bypasses TLS inspection security solutions. Learn about SNIcat and how it circumvents perimeter defenses, with insights on mitigation and detection strategies.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Leverage Recorded Future Playbooks to Automatically Integrate Threat Intelligence with Microsoft Azure

Automate threat intelligence integration in Microsoft Azure using Recorded Future Playbooks for enhanced detection, enrichment, and prevention in Sentinel and Defender ATP.

• YouTube
• 25 minutes
• On-Demand
• Free Video

Black Hat

DSCompromised - A Windows DSC Attack Framework

Explore a PowerShell toolkit leveraging Windows Desired State Configuration for command-and-control, malware persistence, and automatic re-infection. Learn attack techniques and defensive strategies.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk