This book is intended for students and professionals seeking a practical and comprehensive guide for Red Team operations using Kali Linux. It covers everything from environment setup, customized Kali Linux configuration, and integration with corporate, cloud (AWS, Azure, Google Cloud), and lab environments, to the execution of offensive campaigns, simulations, automation, and operational documentation. The 2025 edition features updated content, new tools, and methodologies applicable to real-world offensive security scenarios.
You will learn to:
• Install, configure, and customize Kali Linux for penetration testing and Red Team operations
• Use essential tools such as Nmap, Metasploit, BloodHound, Cobalt Strike, theHarvester, Maltego, Nikto, Gobuster, sqlmap, Hydra, Impacket, CrackMapExec, Mimikatz, and custom scripts
• Implement technical methodologies based on MITRE ATT&CK, manage offensive campaigns, leverage threat intelligence, and integrate with SIEM solutions (Splunk, ELK, Wazuh)
• Automate offensive workflows with pipelines, script versioning, evidence collection, log analysis, and result documentation
• Conduct controlled attacks in on-premises and cloud environments, utilize phishing techniques, lateral movement, post-exploitation, and attacks on industrial infrastructures (ICS/SCADA)
• Apply OPSEC techniques, anonymity, proxies, VPN, Tor, and countermeasures to minimize traces and operational risks
• Build and organize testing labs, carry out integrated Red/Blue Team exercises, analyze defensive responses, and generate detailed reports
• Standardize checklists, validate procedures, document incidents, and collect and organize technical evidence for audits and compliance
By the end, the reader will be prepared to structure and conduct Red Team operations, apply offensive automation, integrate market-leading tools, and produce robust documentation for corporate, cloud, and critical infrastructure environments.
kali linux, red team, pentest, nmap, metasploit, cobalt strike, bloodhound, privilege escalation, phishing, social engineering, aws, azure, google cloud, siem, devsecops, impacket, mimikatz, automation, threat intelligence, purple team, compliance, mitre att&ck, shell, forensics, icsscada, evidence, checklists, reports, pipelines, opsec, anonymity, proxies, tor, active defense, cybersecurity, corporate environments.
Diego Rodrigues
Technical Author and Independent Researcher
ORCID: https://orcid.org/0009-0006-
StudioD21 Smart Tech Content & Intell Systems
Email: studiod21portoalegre@gmail.com
LinkedIn: linkedin.com/in/diegoexpertai
International technical author (tech writer) focused on the structured production of applied knowledge. He is the founder of StudioD21 Smart Tech Content & Intell Systems, where he leads the creation of intelligent frameworks and the publication of didactic technical books supported by artificial intelligence, such as the Kali Linux Extreme series, SMARTBOOKS D21, among others.
Holder of 42 international certifications issued by institutions such as IBM, Google, Microsoft, AWS, Cisco, META, Ec-Council, Palo Alto, and Boston University, he works in the fields of Artificial Intelligence, Machine Learning, Data Science, Big Data, Blockchain, Connectivity Technologies, Ethical Hacking, and Threat Intelligence.
Since 2003, he has developed more than 200 technical projects for brands in Brazil, the USA, and Mexico. In 2024, he established himself as one of the leading technical book authors of the new generation, with over 180 titles published in six languages. His work is based on his proprietary TECHWRITE 2.3 applied technical writing protocol, focused on scalability, conceptual precision, and practical applicability in professional environments.