Resources
BHIS Blog
Current cybersecurity commentary and technical guidance.
sdb explorer
SDB-Explorer Windows & Ubuntu VM The objective of this lab is to use Application Shimming (via the native sdbinst.exe utility) to silently inject a demonstration DLL into a custom 32-bit application,…
psexec
PsExec In this lab we will Use a Linux VM as the attacker Use a Windows VM as the target Run PsExec-style remote execution with Impacket Execute commands on the Windows target over SMB Understand how…
powershell
This is a lab from John Strand 's SOC Core Skills Course: https://www.antisyphontraining.com/product/soc-core-skills-with-john-strand/ PowerShell Windows VM In this lab, we will create malware , run…
impacket
Impacket Ubuntu VM In this lab we will Stand up a local SMB server (Samba) as our "target" Use Impacket to: List SMB shares Browse directories Upload and download files (Optional) query basic SMB/RPC…
flashrom
Flashrom Ubuntu VM In this lab we will Understand what firmware is and why it matters in security Explore Flashrom - a tool for reading and writing firmware chips Use the dummy programmer to safely…
evilginx
Evilginx Lab Goal The goal of this lab is to introduce Evilginx , a reverse-proxy phishing framework that has been used in real-world phishing campaigns. In this lab, we will demonstrate how attackers…
beef
Browser Exploitation Framework (BeEF) Ubuntu VM In this lab we will Start the BeEF framework Hook a victim browser using a JavaScript hook Explore what information BeEF collects automatically Execute…
atomic red team
This is a lab from John Strand 's Active Defense and Cyber Deception Course: https://www.antisyphontraining.com/product/active-defense-and-cyber-deception-with-john-strand/ Atomic Red Team And…
Dynamic Link Library Hijacking
Dynamic Link Library(DLL) Hijacking A DLL (Dynamic Link Library) is a file that contains code and data that multiple programs can use at the same time. Think of it like a shared toolbox - instead of…
Application Shimming
Application Shimming Application shimming is a Windows technique that was originally created for compatibility. It allows software to run even if it was built for older versions of the operating…
Accesibility Features
Accesibility Features Operating systems ship with built-in accessibility tools meant to help users with disabilities. Things like Sticky Keys, the On-Screen Keyboard, and Magnifier are there for good…
Weaponizing Active Directory
Weaponizing Active Directory Active Directory (AD) is Microsoft's directory service. It's what most corporate networks use to manage users, computers, permissions, and policies in one place. If you've…