What are some common tools and techniques used in red team exercises versus penetration testing?

Penetration testing and red teaming draw from overlapping toolsets but deploy them very differently. In a penetration test, tools are used broadly to identify and validate as many vulnerabilities as possible within scope. In a red team exercise, tooling is selected and deployed to achieve a specific goal while maintaining good operational security and avoiding detection. Red team operations typically involve custom or modified payloads, C2 infrastructure, and a combination of technical, social engineering, and physical techniques.