Offensive Development Lab Guide - Lab 1 - Deploying the Lab Environment via Terraform

Oct 24, 2026

Offensive Development Lab Guide delivers a structured, hands-on learning path covering offensive tooling development and usage across a full lab sequence. The guide introduces how to set up the lab environment using Guacamole and AWS, deploy isolation via Terraform, and proceed through progressively advanced labs. Topics span CobaltStrike workflows, beacon and BOF internals, evasion techniques, AMSI and EDR countermeasures, and hands-on offensive development such as shellcode authoring, storage, and process injection.

LanguageEnglish

CategoryTechnology

FormatPDF

Pages205

Reading Time8 h 37 min

AccessFree to download

Lab 1: Deploying the Lab Environment via Terraform

Lab 2: Guacamole Walkthrough

Lab 3: Deep Dive with CobaltStrike

Lab 4: CobaltStrike Beacon Object Files (BOF’s)

Lab 5: Hiding Imports via Dynamic Resolution

Lab 6: Hiding String Detection – Building a Generator

Lab 7: Dynamic resolution + obfuscated strings method

Lab 8: XOR Encrypting Function Calls

Lab 9: Defeating sandbox detection

Lab 10: Finding EDR Active Protection DLL

Lab 11: Unhooking the EDR

Lab 12: DLL Proxying – Gaining Persistence

Lab 13: .NET Assembly Obfuscation

Lab 14: Anti-Malware Scan Interface (AMSI) Bypass

Lab 15: Cobalt Strike IoCs

Lab 16: Patching ETW

Lab 17: Writing Shellcode

Lab 18: Shellcode Storage (Text Section)

Lab 19: Shellcode Storage (Resources Section)

Lab 20: Process Injection: CreateRemoteThread

Lab 21: Process Injection: Process Hollowing

Lab 22: Converting PE files to Shellcode

Lab 23: Process Injection: Early Bird

Lab 24: Attacking AV/EDR Products

Lab 25: Custom Reflective DLL Loaders

Lab 26: Dumping LSASS

Lab 27: The Final Binary – Your Last Challenge

Offensive Development Lab Guide Table of Contents Lab 1: Deploying the Lab Environment via Terraform ................................................................................ 2 Lab 2: Guacamole Walkthrough ...................................................................................................................... 6 Lab 3: Deep Dive with CobaltStrike .............................................................................................................. 12 Lab 4: CobaltStrike Beacon Object Files (BOF’s) ...................................................................................... 38 Lab 5: Hiding Imports via Dynamic Resolution .......................................................................................... 48 Lab 6: Hiding String Detection – Building a Generator ............................................................................. 51 Lab 7: Dynamic resolution + obfuscated strings method ......................................................................... 53 Lab 8: XOR Encrypting Function Calls ........................................................................................................ 55 Lab 9: Defeating sandbox detection ............................................................................................................. 64 Lab 10: Finding EDR Active Protection DLL ............................................................................................... 69 Lab 11: Unhooking the EDR ........................................................................................................................... 76 Lab 12: DLL Proxying – Gaining Persistence ............................................................................................. 85 Lab 13: .NET Assembly Obfuscation ............................................................................................................ 93 Lab 14: Anti-Malware Scan Interface (AMSI) Bypass ................................................................................. 99 Lab 15: Cobalt Strike IoCs ............................................................................................................................ 107 Lab 16: Patching ETW................................................................................................................................... 110 Lab 17: Writing Shellcode ............................................................................................................................ 111 Lab 18: Shellcode Storage (Text Section) ................................................................................................. 114 Lab 19: Shellcode Storage (Resources Section) ...................................................................................... 121 Lab 20: Process Injection: CreateRemoteThread ..................................................................................... 125 Lab 21: Process Injection: Process Hollowing ......................................................................................... 136 Lab 22: Converting PE files to Shellcode .................................................................................................. 145 Lab 23: Process Injection: Early Bird ......................................................................................................... 151 Lab 24: Attacking AV/EDR Products .......................................................................................................... 160 Lab 25: Custom Reflective DLL Loaders ................................................................................................... 187 Lab 26: Dumping LSASS .............................................................................................................................. 193 Lab 27: The Final Binary – Your Last Challenge ...................................................................................... 204 Welcome to the O

FAQs

What is the Offensive Development Lab Guide meant for?

It provides a series of labs that walk learners through security topics focused on developing and using offensive tooling, from beginners to advanced security engineers.

How is the lab environment set up in this guide?

The guide uses Guacamole and AWS to give each student an isolated playground and instructs learners to deploy a Terraform script with their own AWS programmatic access keys.

What does Lab 1 cover?

Lab 1 explains how to deploy the lab environment using Terraform, including what Terraform is and installation steps for different operating systems.

Oct 24, 2026

Upload by cimolpedes