Course overview
Offensive Space Operations is a hands-on course designed for security professionals who need to understand how adversaries target space systems. Moving beyond theoretical vulnerabilities, this course puts you in the attacker’s seat by conducting reconnaissance against satellite constellations, exploiting ground segment weaknesses, manipulating telemetry and command links, and compromising spacecraft subsystems.
Every technique taught maps directly to the SPARTA (Space Attack Research and Tactic Analysis) framework developed by The Aerospace Corporation, giving you a structured understanding of space-specific TTPs that translates directly to red team operations, threat modeling, and defensive architecture decisions.
Students work with ARES (Aerospace Reconnaissance and Exploitation Suite), our purpose-built framework for space system security testing. ARES is designed to execute complete attack chains against space systems, with each step explicitly mapped to corresponding SPARTA tactics and techniques — from initial reconnaissance through exploitation, persistence, and impact.
This is not a survey course. You will execute attacks against realistic space system environments, from ground station infrastructure through RF links to flight software and mission data systems.
Delivery formats
Online + virtual labs
Live instruction plus cloud-hosted lab environments — realistic simulated space systems including ground stations, communication links, and spacecraft flight software, all attackable from your own workstation. Persistent lab access throughout the course and extended access afterward. Full ARES framework included.
In-person + hardware labs
Adds physical hardware to the equation: actual CubeSat FlatSats, ground station radio equipment, and embedded systems. You conduct attacks against real RF links and flight hardware, not just simulations. Students leave having touched the same types of systems they’ll encounter in real-world assessments.
- Red team operators expanding into space system assessments
- Penetration testers working with aerospace and defense clients
- Security engineers responsible for space system architecture
- Threat intelligence analysts focused on aerospace and satellite sectors
- Military and government personnel in space domain operations
- Security researchers interested in space system vulnerability research
- Space systems familiarity — spacecraft, ground segment, mission operations
- Orbital mechanics basics — orbital elements, TLEs, spacecraft dynamics
- Linux command line proficiency
- Networking fundamentals — TCP/IP, common protocols, traffic analysis
- Security foundations — penetration testing concepts and methodology
- Recommended: complete Foundations in Space Cybersecurity first
Upon completion, students will be able to:
- 01 Map offensive operations against space systems to SPARTA tactics, techniques, and countermeasures
- 02 Conduct reconnaissance against satellite constellations and ground infrastructure
- 03 Identify and exploit vulnerabilities in ground segment systems
- 04 Analyze and manipulate space communication protocols (CCSDS, SPP, CSP)
- 05 Execute attacks against command uplinks and telemetry downlinks
- 06 Compromise spacecraft subsystems through software and protocol-level attacks
- 07 Develop attack chains that span ground-to-space segments
- 08 Leverage the ARES framework to execute SPARTA-mapped attack chains end-to-end
- 09 Document and report findings using space-specific threat frameworks
Module 1 · Space Systems Attack Surface
- Space, ground, link, and user segments as attack targets
- SPARTA framework structure and usage
- ARES framework architecture: executing SPARTA-mapped attack chains
- Threat actor landscape: nation-states, criminal groups, insider threats
- Legal and ethical considerations for space system testing
Module 2 · Reconnaissance & Target Development
- OSINT techniques for satellite and ground station discovery
- TLE analysis and orbital prediction for target characterization
- Ground infrastructure enumeration
- Supply chain and vendor mapping
- ARES reconnaissance modules and SPARTA mapping
- Building target packages for space system assessments
Module 3 · Ground Segment Exploitation
- Mission control system architecture and common weaknesses
- Ground station network attacks
- Credential harvesting and lateral movement in space operations networks
- Exploiting operator workstations and data processing systems
- Lab: Ground segment compromise scenario
Module 4 · Link Segment Attacks
- Space communication protocol analysis (CCSDS, AOS, Proximity-1)
- RF signal interception and analysis fundamentals
- Command link vulnerabilities and injection techniques
- Telemetry manipulation and spoofing
- Jamming and denial-of-service considerations
- Lab: Protocol exploitation with ARES
Module 5 · Space Segment Compromise
- Flight software architecture and attack vectors
- Exploiting onboard processing and command handling
- Payload system targeting
- Subsystem manipulation (ADCS, power, thermal, comms)
- Persistence mechanisms in spacecraft environments
- Lab: Spacecraft subsystem attacks
Module 6 · Attack Chains & Integrated Operations
- Building multi-stage attacks across segments
- Pivoting from ground compromise to spacecraft access
- Data exfiltration from mission systems
- Covering tracks in space operations environments
- Lab: End-to-end attack chain execution with ARES
Module 7 · Capstone Exercise (optional add-on)
- Full-scope offensive operation against a realistic space mission environment
- End-to-end attack chain development and execution
- Professional reporting and SPARTA-mapped findings documentation
- Extended lab time with instructor support
- Adds a fourth day to the course
Every technique is explicitly mapped to SPARTA, giving you a common language for offensive space operations that translates directly to threat modeling, red team planning, and security assessments.
You work with ARES — a comprehensive framework that executes complete attack chains with each step mapped to SPARTA — not generic tools awkwardly adapted to space contexts.
Built by operators who conduct space system security assessments, not academics theorizing about vulnerabilities. The scenarios come from real engagement experience.
You don't just learn about vulnerabilities, you exploit them. The labs are designed for students to execute complete attack chains, not run pre-packaged scripts.
The in-person format uses real CubeSat hardware and ground station equipment — the actual embedded systems and RF links you would encounter in the field.
Offensive Space Operations is delivered privately to teams and organizations — no public open enrollment. Reach out with a rough sense of your team size, timeline, and whether you'd like the standard curriculum or a version tailored to your own mission profile.