Welcome To
Free Lab Fridays
Free Lab Fridays is an initiative started by
Black Hills Information Security, Antisyphon Training, and their partner, MetaCTF
This initiative has a simple goal: Education for All.
Looking for something Specific?
Browse through our Lab Database
12 items
Access Token Manipulation
Access Token Manipulation When you log into a system, it does not keep asking for your password on every request. Instead, it gives you a token - a small piece of data that says "this person is…
Broadcast Multicast Protocol Poisoning
Broadcast / Multicast Protocol Poisoning Networks rely on broadcast and multicast protocols to do things like resolve hostnames, find services, and route traffic. The problem is that these protocols…
Cleartext Passwords in Files
Cleartext Passwords in Files When passwords are stored as plain text inside files on a system - no hashing, no encryption, nothing - they become a free gift to any attacker who manages to get a…
Credential Harvesting
Credential Harvesting When attackers get into a network, one of the first things they go after is credentials - usernames and passwords. Not because they need one account, but because one account…
Internal Password Spray
Internal Password Spray A password spray attack is when an attacker tries a small set of commonly used passwords across a large number of accounts. Instead of hammering one account with hundreds of…