Welcome To
Free Lab Fridays
Free Lab Fridays is an initiative started by
Black Hills Information Security, Antisyphon Training, and their partner, MetaCTF
This initiative has a simple goal: Education for All.
Looking for something Specific?
Browse through our Lab Database
13 items
Bring Your Own Exploited Device
Bring Your Own (Exploited) Device A compromised device is a personal laptop, phone, or tablet that an attacker has already infected before it connects to a company network. In organizations that allow…
Compromised Web Server
Compromised Web Server When an attacker gains unauthorized access to a web server, it is deemed compromised . This typically occurs as a result of a vulnerability in the server software, the website,…
Credential Stuffing
Credential Stuffing Credential stuffing is an attack where someone takes stolen username and password pairs (usually leaked in data breaches) and tries them across many websites and services. The…
Exploitation Of Missing HSTS
Exploitation of Missing HTTP Strict Transport Security (HSTS) When you visit a website over HTTPS, your browser and the server agree to keep the connection encrypted. HSTS is a security header that…
External Password Spray
External Password Spray An external password spray is a login attack where attackers try a small set of common passwords against many accounts from outside the organization. Instead of guessing many…
External Service Exploitation
Exploited External Service External service exploitation happens when an attacker gains access to a system by abusing a service that is exposed to the internet These services are not websites only -…