Tribe of Hackers Red Team

Want Red Team offensive advice from the biggest cybersecurity names in the industry? Join our tribe.

The Tribe of Hackers team is back with a new guide packed with insights from dozens of the world’s leading Red Team security specialists. With their deep knowledge of system vulnerabilities and innovative solutions for correcting security flaws, Red Team hackers are in high demand. Tribe of Hackers Red Team: Tribal Knowledge from the Best in Offensive Cybersecurity takes the valuable lessons and popular interview format from the original Tribe of Hackers and dives deeper into the world of Red Team security with expert perspectives on issues like penetration testing and ethical hacking. This unique guide includes inspiring interviews from influential security specialists, including David Kennedy, Rob Fuller, Jayson E. Street, and Georgia Weidman, who share their real-world learnings on everything from Red Team tools and tactics to careers and communication, presentation strategies, legal concerns, and more

• Learn what it takes to secure a Red Team job and to stand out from other candidates
• Discover how to hone your hacking skills while staying on the right side of the law
• Get tips for collaborating on documentation and reporting
• Explore ways to garner support from leadership on your security proposals
• Identify the most important control to prevent compromising your network
• Uncover the latest tools for Red Team offensive security

Whether you’re new to Red Team security, an experienced practitioner, or ready to lead your own team, Tribe of Hackers Red Team has the real-world advice and practical guidance you need to advance your information security career and ready yourself for the Red Team offensive.

Introduction vi

01 Marcus J. Carey 1

02 David Bell 5

03 Paul Brager 10

04 Beau Bullock 16

05 Christopher Campbell 22

06 Stephanie Carruthers 28

07 Mark Clayton 34

08 Ben Donnelly 39

09 Skip Duckwall 47

10 Ronald Eddings 52

11 Justin Elze 57

12 Mike Felch 62

13 Kevin Figueroa 70

14 Marco Figueroa 75

15 Jared Folkins 80

16 Rob Fuller 86

17 Patrick Fussell 92

18 Chris Gates 97

19 Brian Genz 102

20 Jared Haight 112

21 Stephen Hilt 118

22 Brent Kennedy 122

23 David Kennedy 128

24 Maggie Ligon 139

25 Jeff rey Man 143

26 Tim MalcomVetter 151

27 Brandon McCrillis 161

28 Oddvar Moe 164

29 Chris Nickerson 169

30 Ryan O’Horo 176

31 Carlos Perez 179

32 Francesc Rodriguez 185

33 Derek Rook 190

34 Isaiah Sarju 195

35 Mary Sawyer 200

36 Bradley Schaufenbuel 204

37 Tinker Secor 210

38 Jayson E. Street 217

39 Chris Truncer 223

40 Carl Vincent 230

41 Georgia Weidman 238

42 Adam Willard 244

43 Jake Williams 248

44 Robert Willis 253

45 Robin Wood 259

46 Wirefall 264

47 Phillip Wylie 271

Epilogue 274

MARCUS J. CAREY is a cybersecurity community advocate and startup founder with over 25 years of experience protecting government and commercial sensitive data. He started his cybersecurity career in U.S. Navy cryptology with further service in the National Security Agency (NSA). He is the co-author of the Tribe of Hackers series of books.

JENNIFER JIN is a communications and marketing professional focused on the cybersecurity, gaming, and tech industries. She is passionate about non-profit work and mentorship, and is the co-author of the Tribe of Hackers series of books.

"TRIBE OF HACKERS" RETURNS—PROVIDING THE BEST ADVICE AND PRACTICAL INSIGHTS ON RED TEAM OFFENSIVE CYBERSECURITY FROM THE BIGGEST NAMES IN THE INDUSTRY!

Hired by organizations of all kinds, red team hackers are highly sought-after cybersecurity professionals who probe systems for vulnerabilities, provide solutions to correct flaws, and improve information security. From the authors who brought you the bestselling Tribe of Hackers comes Tribe of Hackers Red Team, a collection of invaluable real-world insights from dozens of the world's leading cybersecurity experts. This book offers expert perspectives on Red Team issues such as penetration testing and offensive ethical hacking techniques.

Influential security specialists including David Kennedy, Rob Fuller, Jayson E. Street, and Georgia Weidman share their best red team tools and tactics, as well as career advice, communication and presentation strategies, professional development tips, approaches to practical and legal issues, firsthand anecdotes, and much more. A must-read for anyone involved in cybersecurity—from beginners seeking to join a Red Team to experienced practitioners wishing to increase their knowledge or start their own team— Tribe of Hackers Red Team answers questions such as:

• What is the best way to get a red team job?
• How can someone gain red team skills without getting in trouble with the law?
• What's the most important control that can prevent you from compromising a system or network?
• What differentiates good red teamers from the pack?
• How do you work together to get the job done, including documentation, reporting?
• How do you recommend security improvements other than pointing out where it's insufficient?