Welcome To
Free Lab Fridays
Free Lab Fridays is an initiative started by
Black Hills Information Security, Antisyphon Training, and their partner, MetaCTF
This initiative has a simple goal: Education for All.

HOW IT WORKS
Looking for a place to safely complete all of the labs you see?
Free Lab Fridays has the answer.
By providing your email at the link below, you will receive a special code that will grant you 2 HOURS of access to a meticulously crafted lab environment,
hosted on MetaCTF’s CloudLab platform.
On this platform, you will be able to spin up a snapshotted instance of a virtual machine that has everything you will need to complete all 200+ labs,
and the best part? It's all accessible with the click of a button.
One VM. Unlimited Capability.
What If I Use All 2 Free Hours?
Don’t worry! Come back next Friday,
and you’ll get another 2 VM Lab HOURS, for Free!
Please Note: Stacking Hours is NOT possible!
Jump Right in
Looking for something Specific?
Browse through our Lab Database
8 items
Credential Stuffing
July 29, 2026
Credential Stuffing Credential stuffing is an attack where someone takes stolen username and password pairs (usually leaked in data breaches) and tries them across many websites and services. The…
External Password Spray
July 29, 2026
External Password Spray An external password spray is a login attack where attackers try a small set of common passwords against many accounts from outside the organization. Instead of guessing many…
Internal Spearphishing
July 29, 2026
Internal Spearphishing Most phishing attacks come from outside - random emails, fake domains, obvious scams. Internal spearphishing is different. Here, the attacker already has a foot in the door.…
Malicious Email Rules
July 29, 2026
Malicious Email Rules When an attacker gets into someone's email account, the first thing they usually do is not read the emails. They set up rules. Email rules are a built-in feature of almost every…
Phishing
July 29, 2026
Phishing Phishing is an attack in which users are duped into divulging login information, opening infected files, or clicking on malicious links. It typically arrives via email, but it can also arrive…
Social Engineering
July 29, 2026
Social Engineering Social engineering is when an attacker targets people instead of systems . Instead of breaking technical defenses directly, they convince someone to help them - often without the…
Are You An Educator?
Black Hills Information Security & Antisyphon Training offer special functionality for verified educators.
Want to check it out? Fill out the form below to get verified and unlock custom lesson building, quiz building, and more!