🔴 Red Team Operations

• Full kill chain execution from initial access to exfil
• C2 framework deployment & operation (Sliver, AdaptixC2, Cobalt Strike)
• OPSEC-conscious tradecraft - traffic shaping, redirectors, CDN fronting
• Full Adversary emulation

🧬 Malware Development

• Windows process injection - classic, ghostwriting, module stomping
• AV/EDR evasion - syscalls, unhooking, PPID spoofing
• Custom loaders, stagers, droppers in C
• Payload staging & obfuscation pipelines

📱 iOS / macOS Internals

• MDM protocol exploitation & configuration profile weaponization
• Supervised payload abuse (App Lock, DEP hijacking, AirPlay)
• .mobileconfig CMS signing & delivery
• Mobile device management attack scenarios

🏢 Active Directory & Cloud

• Kerberoasting, AS-REP, Pass-the-Hash, DCSync
• ACL/DACL abuse, delegation attacks, BloodHound analysis
• AWS/Azure/GCP lateral movement, IAM privilege escalation
• Cloud misconfiguration identification & exploitation

🌐 Web & API Pentesting

• OWASP Top 10 exploitation
• REST/GraphQL/OAuth attack surface
• JWT attacks, IDOR, business logic flaws
• Authenticated & unauthenticated recon pipelines

🎣 Social Engineering & Phishing

• AiTM credential capture (Evilginx3)
• Pretexting, vishing, physical pretext campaigns
• Custom lure development & infrastructure staging
• MFA relay & token theft techniques