MITRE ATT&CK: Reconnaissance Cyber Range

This lab entails a series of Mitre ATT&CK techniques and sub techniques with the aim of creating a detailed profile, which includes organization, infrastructure, and human resource mapping.

This lab incorporates a series of Mitre ATT&CK techniques and sub techniques to show how website enumeration can discover resources and underlying technology that the webserver is using

This lab entails a series of Mitre ATT&CK techniques and sub techniques to learn how routers and access points can be targeted and enumerated.

Routers are networking devices that perform the traffic directing functions between computer networks. If adversaries gain access to these devices, an entirely internal network structure is compromised. Different attack vectors exist for exploiting these devices, allowing adversaries to gain higher access by port forwarding between machines.

This lab entails a series of Mitre ATT&CK techniques and sub techniques with the aim of showcasing the possibility of intertwinement between them. The conjoining of the techniques is done in order to gather information on the victim’s networks and search freely on available technical databases for information which can be used during targeting.In order to enumerate DNS a general understanding of DNS and how it functions is required.Communication through the internet or private networks requires the identification and localizations of each host and their respective IP address. Nonetheless, remembering IP addresses for each host would be a lengthy and tedious task. Thus, each host is assigned a name known as the domain name. Additionally, the domain name is mapped with the corresponding IP address. The association between the domain name and the IP address is all defined by the Domain Name System (DNS) database. As such, DNS is essentially an internet phone book, which resolves the issue of human read web addresses to IP addresses.

This lab entails a series of Mitre ATT&CK techniques and sub techniques to identify and bypass security mechanisms to extract server information and plan a spearphishing attack,

This lab will focus on learning students to map the network structure by probing the active hosts via network traffic. The lab covers scenarios of false-positive results, packet crafting, and stealthy scanning.