Welcome To
Free Lab Fridays

Free Lab Fridays is an initiative started by

Black Hills Information Security, Antisyphon Training, and their partner, MetaCTF

This initiative has a simple goal: Education for All.

<p><span class="ql-size-title">Welcome To </span></p><p><span class="ql-size-title">Free Lab Fridays</span></p>

HOW IT WORKS

Looking for a place to safely complete all of the labs you see?

Free Lab Fridays has the answer.

By providing your email at the link below, you will receive a special code that will grant you 2 HOURS of access to a meticulously crafted lab environment,

hosted on MetaCTF’s CloudLab platform.

On this platform, you will be able to spin up a snapshotted instance of a virtual machine that has everything you will need to complete all 200+ labs,

and the best part? It's all accessible with the click of a button.

One VM. Unlimited Capability.

What If I Use All 2 Free Hours?

Don’t worry! Come back next Friday,

and you’ll get another 2 VM Lab HOURS, for Free!

Please Note: Stacking Hours is NOT possible!

Jump Right in

Intro Class Labs B&B Card Labs Play B&B Competitive Online CTFs NIST NICE Framework CIS Critical Security Controls MITRE ATT&CK Framework OWASP Top 10 DoD 8140

Looking for something Specific?

Browse through our Lab Database

3 items

Compromised Web Server

July 29, 2026

Compromised Web Server When an attacker gains unauthorized access to a web server, it is deemed compromised . This typically occurs as a result of a vulnerability in the server software, the website,…

Initial Compromise External Service Exploitation Finding: Unpatched Software Finding: Sensitive Service Exposed Finding: Default Credentials Finding: Missing Authentication PD-WRL-007 PD-WRL-003 OPM 541 OPM 531 DoD 8140 DCWF 541 DCWF 531 CIS 7 CIS 7.4 CIS 7.6 TA0001 T1133 T1190

External Service Exploitation

July 29, 2026

Exploited External Service External service exploitation happens when an attacker gains access to a system by abusing a service that is exposed to the internet These services are not websites only -…

Initial Compromise Trusted Relationship Finding: MFA Not Required Finding: Sensitive Service Exposed Finding: Weak RDP Configuration PD-WRL-003 OG-WRL-012 OPM 531 OPM 612 NF-COM-011 DoD 8140 DCWF 531 DCWF 612 CIS 15 CIS 15.1 CIS 15.4 TA0001 T1199

Trusted Relationship

July 29, 2026

Compromised Trusted Relationship A trusted relationship issue happens when attackers abuse access that already exists between an organization and a third party - for example a vendor, contractor, or…

Are You An Educator?

Black Hills Information Security & Antisyphon Training offer special functionality for verified educators.

Want to check it out? Fill out the form below to get verified and unlock custom lesson building, quiz building, and more!

Apply For Educator Role

Welcome To Free Lab Fridays

HOW IT WORKS

What If I Use All 2 Free Hours?

Jump Right in

Looking for something Specific?

Compromised Web Server

External Service Exploitation

Trusted Relationship

Are You An Educator?

Welcome To
Free Lab Fridays