Resources
BHIS Blog
Current cybersecurity commentary and technical guidance.
SNAC Attack
Stale Network Address Configurations (SNAC) Attack Networks change all the time - servers get decommissioned, IPs get reassigned, services move around. The problem is that the old records pointing to…
SMB Abuse
Server Message Block (SMB) Abuse Server Message Block (SMB) is a network protocol used by Windows machines to share files, printers, and other resources across a local network. It is deeply integrated…
responder
This is a lab from John Strand 's Information Security Core Skills Course: https://www.antisyphontraining.com/product/information-security-core-skills-tm/ Responder Both VMs In this lab we are going…
Internal Spearphishing
Internal Spearphishing Most phishing attacks come from outside - random emails, fake domains, obvious scams. Internal spearphishing is different. Here, the attacker already has a foot in the door.…
SNAC Attack CTF Quiz
Test your knowledge of SNAC Attack with this CTF quiz!
SMB Abuse CTF Quiz
Test your knowledge of SMB Abuse with this CTF quiz!
Internal Spearphishing CTF Quiz
Test your knowledge of Internal Spearphishing with this CTF Quiz!
Cleartext Passwords in Files CTF Quiz
Test your knowledge of Cleartext Passwords in Files with this CTF quiz!
Access Token Manipulation CTF Quiz
Test your knowledge of Access Token Manipulation with this CTF quiz!
Cleartext Passwords in Files
Cleartext Passwords in Files When passwords are stored as plain text inside files on a system - no hashing, no encryption, nothing - they become a free gift to any attacker who manages to get a…
Access Token Manipulation
Access Token Manipulation When you log into a system, it does not keep asking for your password on every request. Instead, it gives you a token - a small piece of data that says "this person is…
Supply Chain Attack
Supply Chain Attack A supply chain attack happens when an attacker does not target your systems directly - they go after the software or tools you already trust. Instead of breaking down your front…