CoreQ Academy4.10 Given a scenario, use scripting to automate attacks.
Automation lets testers repeat techniques consistently and lets defenders measure detection coverage with breach and attack simulation.
PowerShell
- PowerShell
- Windows scripting used for AD and host automation.
- PowerSploit
- Collection of PowerShell modules for reconnaissance and post-exploitation.
- PowerView
- PowerShell AD enumeration tool (part of PowerSploit).
- PowerUpSQL
- PowerShell toolkit for discovering and assessing SQL Server instances.
- AD search
- Querying Active Directory for users, groups, computers and permissions.
Bash
- Bash
- Linux scripting to chain tools and process output.
- Input/output management
- Redirecting and piping input and output between commands and files.
- Data manipulation
- Filtering and transforming text with grep, awk, sed, cut and sort.
Python
- Python
- General scripting for custom tools and automation.
- Impacket
- Python classes for Windows network protocols.
- Scapy
- Python packet crafting and analysis.
Breach and attack simulation (BAS)
- Breach and attack simulation (BAS)
- Automated, safe emulation of adversary techniques to test whether defences detect and block them.
- Caldera
- MITRE's automated adversary emulation platform built on ATT&CK.
- Infection Monkey
- Open-source tool that simulates lateral movement to test network segmentation.
- Atomic Red Team
- Library of small, ATT&CK-mapped tests for validating detections.
Hands-on practice
Check your understanding
Loading quiz…
Original CoreQ Academy material, mapped to objective 4.10 of the publicly available CompTIA PenTest+ PT0-003 exam objectives (Exam objectives V3, document version 5.0). Not affiliated with or endorsed by CompTIA. Contains no exam questions.