Resources
BHIS Blog
Current cybersecurity commentary and technical guidance.
New Service Creation Modification
New Service Creation / Modification Services are background processes that run on a system - usually starting automatically when the machine boots. They handle things like networking, logging,…
Local Privilege Escalation
Local Privilege Escalation (LPE) Local Privilege Escalation happens after an attacker already has access to a system, but only as a low-privileged user The goal is simple: turn limited access into…
sharpup
SharpUp Windows VM In this lab we will Create two realistic privilege‑escalation misconfigurations Run SharpUp to audit the system Save the output to a file Locate the misconfigurations in the SharpUp…
seatbelt
Seatbelt Windows VM In this lab we will Create interesting system artifact Check logon events in the past 30 days Run specific Seatbelt enumeration groups Analyze the results Seatbelt Seatbelt is a…
responder
This is a lab from John Strand 's Information Security Core Skills Course: https://www.antisyphontraining.com/product/information-security-core-skills-tm/ Responder In this lab we are going to walk…
peass ng
PEASS-ng Ubuntu VM Goal: Learn what PEASS-ng / LinPEAS can discover on a Linux host by creating a few safe “bad configs” in a lab VM , running LinPEAS, and reviewing the findings.…
netexec
NetExec Lab Goal The goal of this lab is to introduce netexec , a tool widely used in penetration testing assessments. In this lab, we will focus on SMB protocol enumeration. In this lab you will…
net use
net use Windows VM is a built in Windows command that connects to, disconnects from, and lists shared network resources (file shares, printers). It has existed since the early NT days and is still one…
lolbins
LOLBins Ubuntu VM What are LOLBins? LOLBins are legitimate system binaries already present on an operating system that attackers abuse for malicious purposes - without ever dropping custom malware.…
inveigh
Inveigh Windows VM In this lab we will Understand why LLMNR and NBT-NS are dangerous on Windows networks Run Inveigh on a Windows machine Capture NTLMv2 hash via HTTP NTLM poisoning Analyze what was…
impacket
Impacket Ubuntu VM In this lab we will Stand up a local SMB server (Samba) as our "target" Use Impacket to: List SMB shares Browse directories Upload and download files (Optional) query basic SMB/RPC…
hashcat
Haschat Ubuntu VM In this lab we will be getting started with the fundamentals of password cracking. We will be using Hashcat to do this. After you open a terminal, we need to gain root access by…