Build-a-thon: Red team IaC

A hands-on, collaborative workshop where participants design, build, and deploy red team infrastructure using code.

What is it?

The Build-a-thon is a collaborative session where teams design and implement red team infrastructure using Infrastructure as Code (IaC) principles. Participants work through exercises to automate and manage infrastructure in a controlled lab environment, using European cloud providers such as Hetzner.

Why it matters

Red team infrastructure is essential for offensive security operations. Using IaC ensures consistency, reproducibility, and efficiency in deployment. This workshop teaches participants how to plan, implement, and maintain infrastructure for testing and simulations.

Workshop flow (what participants do)

Session

Activity

Introduction

Overview of IaC principles, tools, and workshop goals.

Planning & Design

Teams design their red team infrastructure architecture.

Implementation

Hands-on coding session to build the infrastructure in a lab environment.

Testing & Validation

Deploy and test the infrastructure to confirm it works as intended.

Review & Reflection

Teams present their solutions and discuss lessons learned.

Reference materials: Red Team IaC documentation

What you’ll walk away with

  • Practical experience planning and implementing red team infrastructure.

  • Understanding of how to use IaC to automate deployments.

  • A working infrastructure solution ready for lab exercises.

Who is this for?

  • Red team operators and offensive security professionals.

  • DevOps or technical staff supporting red team operations.

  • Teams wanting to standardise and automate their red team setups.

Delivery at a glance

  • Duration: 2–3 days depending on team size and complexity.

  • Setup: Local lab plus access to European cloud accounts (e.g., Hetzner).

  • Format: Hands-on exercises, group planning, implementation, and review sessions.