Real-World Red Team Operations for Military, Government & Critical Enterprise
Emulate. Breach. Persist.
CITADEL is CYBER RANGES’ comprehensive, real-world red team training lab that goes beyond competitor offerings by covering the full adversary attack lifecycle, delivering an enterprise-scale Active Directory environment, and providing deeper assessments of modern adversarial tradecraft.
Unlike platforms that assume breach, CITADEL challenges users to gain access, establish control, and pivot realistically within a high-fidelity cyber terrain.
Red Team Operations
Why CITADEL?
Full Adversary Lifecycle
Realistic Enterprise
AD Environment
Advanced Tradecraft Training
Certification & Outcomes
Receive scoring, MITRE ATT&CK® mapping, analytics, and NICE-aligned skill validation.
Flexible Delivery
CITADEL provides participants five sequential, progressive scenarios that cover the complete adversary attack lifecycle. Each scenario is browser-accessible and mapped to real-world threats, MITRE ATT&CK techniques, and relevant NIST NICE work roles and competencies, ensuring practical skills development that reflects industry standards.
| Feature | CITADEL | HTB DANTE | OSCP | TryHackMe |
|---|---|---|---|---|
Total Flags | 30 | 27 | ~20 (variable across labs) | ~10–15 per red team path (variable) |
Environment Size | 13 Windows systems, Medium-sized AD network | 8 Windows systems, Smaller AD network | 1–3 targets per exercise, standalone labs | Mostly standalone machines, few interconnected scenarios |
Initial Access Phase | ✅ Phishing, Outlook Attacks, Password Spraying, Payload Dev | ❌ Not Assessed (Assumed Breach) | ✅ Phishing simulation, Payload Development, Web Initial Access | ✅ Intro to phishing, web exploits, password attacks |
C1 Frameworks | ✅ Covenant, Sliver + Any C2 of Choice | ❌ Not Covered | ❌ Not Covered explicitly | ❌ Not Covered explicitly |
Privilege Escalation | ✅ Seatbelt, SweetPotato, Unquoted Services, UAC Bypass, Scheduled Tasks | ❌ Limited | ✅ Common PE techniques (e.g., UAC bypass, Unquoted Services) | ✅ Covers basic PE, less depth and realism |
Persistence Techniques | ✅ AutoRuns, DLL-Side Loading, WMI, Scheduled Tasks | ❌ Not Covered | ❌ Limited | ❌ Not Covered explicitly |
Credential Access | ✅ Full: Browsers, Tokens, KeePass, LSASS, Registry | ❌ Limited | ✅ LSASS, Registry, basic token theft | ✅ LSASS, browser harvesting, basic password reuse |
Active Directory Attacks | ✅ Enumeration, Delegation, Kerberoasting, Exfiltration | ❌ Basic Enumeration & Escalation Only | ❌ Minimal AD (mostly standalone hosts) | ❌ Minimal AD; most scenarios are isolated |
PRACTICAL SKILLS DEVELOPMENT
Scenario Playlist
Initial Access
Develop phishing payloads, exploit Outlook, perform password spraying.
Host Enumeration & Privilege Escalation
Use SweetPotato, Seatbelt, DLL hijacking, and bypass techniques.
Persistence
Establish long-term access with WMI, scheduled tasks, registry, and autoruns.
Credential Access
Extract browser credentials, tokens, and decrypt password stores
Active Directory Attacks
Execute Kerberoasting, AS-REP Roasting, lateral movement, and domain takeover
Key Takeaways
No Assumed Breach
Participants must execute realistic access tactics including phishing, payload creation, and social engineering.
Real-World C2 Training
Train with modern C2 tools to simulate post-exploitation operations.
Advanced Credential & AD Attacks
Full chain credential dumping, impersonation, delegation abuse, and domain persistence.
Target Audiences
Target Audience
CITADEL is designed for:
- Red Teamers and Penetration Testers requiring advanced adversary emulation
- Adversary Simulation Specialists using MITRE ATT&CK & NICE
- Blue Teamers and Incident Responders seeking offensive training
- Purple Teams improving collaborative threat moddeling
Recommended Experience
Intermediate to advanced knowledge of offensive security, Windows internals, Active Directory, and scripting is required.
Flexibile
Delivery Options
SaaS
National CERTs and Incident Response Teams
On-Premises
Portable
NATO and Allied Defense Organizations
Practical Skills Development
How It Works
1
Purchase Access
Buy CITADEL access (see purchase options below)
2
Access Scenarios
Once purchased access scenarios and read each description and start the lab when ready
3
Self-Paced Learning
You have the license duration period (30 days) to complete the training. Contact us if you need any extension.
4
Review dashboards, refine skills, and earn the capstone red team certification
Purchase Options
Register/login to the CYBER RANGES app and purchase the CITADEL Playlist.
Download The CITADEL Product Datasheet
"CITADEL's scenarios mirrored our operational environment and exposed real gaps in our defenses. The Drill Masters' feedback was invaluable."