Command-and-control infrastructure can expose a Red Team operation if it is poorly designed or unnecessarily visible to defenders. Redirectors provide an additional layer between operators and their C2 infrastructure, helping protect backend systems while giving teams more control over how traffic reaches them.
In this session, David Mayer will examine several redirector strategies and walk through how to set up and configure them for Red Team operations. Attendees will see where different approaches fit, the operational considerations behind their use, and how redirectors support more resilient C2 infrastructure.
Who should attend
Red Team operators and penetration testers who want to better understand how redirectors fit into C2 infrastructure design and how to configure them for offensive security engagements. The session is also relevant to practitioners building or refining their Red Team infrastructure and operational security practices.
Learning objectives
- Explain the role of redirectors in protecting C2 infrastructure
- Compare different redirector strategies and where they may fit within an engagement
- Set up and configure redirectors for C2 operations
- Identify operational considerations when designing more resilient Red Team infrastructure
This session supports concepts from the SANS Offensive Operations curriculum. To learn more, browse upcoming course runs, and access a wide range of free tools and resources, Click Here!
