Thinking Offensively

Operations Manual

About this manual

The Thinking Offensively Operations Manual is a practitioner-focused offensive security reference that documents how attacks are planned, executed, and evaluated, with an emphasis on attacker decision-making, tradeoffs, and objectives.

Content is written from the attacker’s point of view and grounded in real-world offensive operations. Techniques are presented to illustrate why certain decisions are made, followed by how those decisions are commonly executed in practice.

This is not a certification guide, a vulnerability encyclopedia, or a collection of lab walkthroughs. Specific commands, tools, and techinques are included where they add value, but they are always secondary to developing the attacker's mindset.

Audience

This manual is intended for:

• Offensive security practitioners refining their tradecraft

• Security leaders seeking offensive security context

• Defenders who want to better understand attacker behavior

Each section in this manual is a combination of conceptual and technical information. All are designed to connect attacker behavior to actual risk.

Organization

This manual is structured around how offensive operations are executed.

• Reconnaissance – Building understanding of the target

• Initial Access – Establishing a foothold

• Privilege Escalation – Expanding privileges and options

• Lateral Movement – Expanding access into desired areas

• Actions on Objective – Accomplishing attack objectives

Each section explains why an approach matters, followed by examples of how it is commonly executed. Tools and commands are included where they add value, but always to aid in decision-making.

How to use the manual

Use this manual as:

• A reference during offensive engagements

• A tool for sharpening tradecraft

• A source of context for strategic security discussions

• One of many. There are a number of incredible resources out there, use them all to gather various perspectives.

Finally, this guide is not intended to be read linearly. Start with the questions you are trying to answer and navigate to the appropriate section(s).