Resources
BHIS Blog
Current cybersecurity commentary and technical guidance.
Physical Access
Physical Access Physical access attacks happen when an attacker gets into a place they should not be - a server room, an office, a data center, or anywhere they can touch hardware directly. Unlike…
Exploitation Of Missing HSTS
Exploitation of Missing HTTP Strict Transport Security (HSTS) When you visit a website over HTTPS, your browser and the server agree to keep the connection encrypted. HSTS is a security header that…
Supply Chain Attack CTF Quiz
Test your knowledge of Supply Chain Attack with this CTF quiz!
Physical Access CTF Quiz
Test your knowledge with Physical Access with this CTF Quiz!
Exploitation Of Missing HSTS CTF Quiz
Test your knowledge of Exploitation Of Missing HSTS with this CTF quiz!
Site Walkthrough
Site Walkthrough A site walkthrough is when the defenders physically go to the location being investigated. They walk through the space, inspect hardware, check logs on-site, and look for anything…
Physical Security Review
Physical Security Review Physical security is what stands between an attacker and the hardware, people, and data inside a building. When people think about hacking, they usually picture someone behind…
Site Walkthrough CTF Quiz
Easy CTF 1 - Spotting the Rogue Device During a site walkthrough, you inspect the server room. Everything looks normal at first glance - until you crouch down and check the back of the main switch.…
Physical Security Review CTF Quiz
Test your knowledge of Physical Security Review with this CTF quiz!
Physical Medium as Exfil
Physical Medium as Exfil Data exfiltration does not always happen over the internet. Sometimes, the simplest way to steal data is to walk out with it. Physical medium exfiltration is exactly that -…
Physical Medium as Exfil CTF Quiz
Test your knowledge of Physical Medium as Exfil with this CTF quiz!
New User Added
New User Added When attackers get into a system, their first concern is staying in. One of the simplest ways to do that is creating a new user account - one they control, one that blends in, and one…