Cyber Range Red Team

This semester, I’m part of the LSU Cybersecurity Clinic, helping build a cyber training range for a government partner.

I started by helping set up the Active Directory environment on Windows Server with users, groups, and GPOs, and left a few misconfigurations in on purpose. After that, I replicated a privilege escalation using a public CVE against a Windows Server 2022 build. I had to cross-compile the exploit on my Linux host and drop it onto the target as a Base64 payload.

As the red team, we will train the partner’s pentesters by giving them playbooks and answering their questions as they work through the range.