Resources
BHIS Blog
Current cybersecurity commentary and technical guidance.
Application Shimming CTF Quiz
Test your knowledge of Application Shimming with this CTF quiz!
Accessibility Features CTF Quiz
Test your knowledge of Accessibility Features with this CTF quiz!
Application Shimming
Application Shimming Application shimming is a Windows technique that was originally created for compatibility. It allows software to run even if it was built for older versions of the operating…
Accesibility Features
Accesibility Features Operating systems ship with built-in accessibility tools meant to help users with disabilities. Things like Sticky Keys, the On-Screen Keyboard, and Magnifier are there for good…
Weaponizing Active Directory
Weaponizing Active Directory Active Directory (AD) is Microsoft's directory service. It's what most corporate networks use to manage users, computers, permissions, and policies in one place. If you've…
New Service Creation Modification
New Service Creation / Modification Services are background processes that run on a system - usually starting automatically when the machine boots. They handle things like networking, logging,…
Local Privilege Escalation
Local Privilege Escalation (LPE) Local Privilege Escalation happens after an attacker already has access to a system, but only as a low-privileged user The goal is simple: turn limited access into…
sharpup
SharpUp Windows VM In this lab we will Create two realistic privilege‑escalation misconfigurations Run SharpUp to audit the system Save the output to a file Locate the misconfigurations in the SharpUp…
seatbelt
Seatbelt Windows VM In this lab we will Create interesting system artifact Check logon events in the past 30 days Run specific Seatbelt enumeration groups Analyze the results Seatbelt Seatbelt is a…
responder
This is a lab from John Strand 's Information Security Core Skills Course: https://www.antisyphontraining.com/product/information-security-core-skills-tm/ Responder In this lab we are going to walk…
peass ng
PEASS-ng Ubuntu VM Goal: Learn what PEASS-ng / LinPEAS can discover on a Linux host by creating a few safe “bad configs” in a lab VM , running LinPEAS, and reviewing the findings.…
netexec
NetExec Lab Goal The goal of this lab is to introduce netexec , a tool widely used in penetration testing assessments. In this lab, we will focus on SMB protocol enumeration. In this lab you will…