Resources
BHIS Blog
Current cybersecurity commentary and technical guidance.
Kerberoasting
Kerberoasting Kerberoasting is an Active Directory attack technique that targets service accounts It does not rely on malware or exploits. Instead, it abuses how Kerberos authentication is designed to…
Internal Password Spray
Internal Password Spray A password spray attack is when an attacker tries a small set of commonly used passwords across a large number of accounts. Instead of hammering one account with hundreds of…
Credential Harvesting
Credential Harvesting When attackers get into a network, one of the first things they go after is credentials - usernames and passwords. Not because they need one account, but because one account…
Broadcast Multicast Protocol Poisoning
Broadcast / Multicast Protocol Poisoning Networks rely on broadcast and multicast protocols to do things like resolve hostnames, find services, and route traffic. The problem is that these protocols…
Unauthorized Cloud Access
Unauthorized Cloud Access When an attacker accesses SaaS platforms or cloud infrastructure without authorization, it is known as unauthorized cloud access. Cloud servers, storage, identities, and…
Trusted Relationship
Compromised Trusted Relationship A trusted relationship issue happens when attackers abuse access that already exists between an organization and a third party - for example a vendor, contractor, or…
Social Engineering
Social Engineering Social engineering is when an attacker targets people instead of systems . Instead of breaking technical defenses directly, they convince someone to help them - often without the…
Phishing
Phishing Phishing is an attack in which users are duped into divulging login information, opening infected files, or clicking on malicious links. It typically arrives via email, but it can also arrive…
sqlmap
SQLMap Ubuntu VM Lab Goal The goal of this lab is to introduce sqlmap , a tool used to automate the detection and exploitation of SQL injection vulnerabilities. In this lab you will Understand the…
SocialEngineerToolkit
Social Engineering Toolkit (SET) Ubuntu VM In this lab we will Clone a real website to create a credential harvester Send a simulated phishing payload using SET's built-in tools Understand how…
Shodan
Shodan Goal: Learn what Shodan can do using the web interface In this lab you will Understand what Shodan is and how it works Use the Shodan web UI to search the internet Read service banners and…
scoutsuite
ScoutSuite For the Ubuntu VM Lab Objective The objective of this lab is to use Scout Suite to audit an AWS cloud environment and identify critical security misconfigurations related to Identity Access…