Resources
BHIS Blog
Current cybersecurity commentary and technical guidance.
responder
This is a lab from John Strand 's Information Security Core Skills Course: https://www.antisyphontraining.com/product/information-security-core-skills-tm/ Responder In this lab we are going to walk…
psexec
PsExec In this lab we will Use a Linux VM as the attacker Use a Windows VM as the target Run PsExec-style remote execution with Impacket Execute commands on the Windows target over SMB Understand how…
powershell
This is a lab from John Strand 's SOC Core Skills Course: https://www.antisyphontraining.com/product/soc-core-skills-with-john-strand/ PowerShell Windows VM In this lab, we will create malware , run…
peass ng
PEASS-ng Ubuntu VM Goal: Learn what PEASS-ng / LinPEAS can discover on a Linux host by creating a few safe “bad configs” in a lab VM , running LinPEAS, and reviewing the findings.…
netexec
NetExec Lab Goal The goal of this lab is to introduce netexec , a tool widely used in penetration testing assessments. In this lab, we will focus on SMB protocol enumeration. In this lab you will…
net use
net use Windows VM is a built in Windows command that connects to, disconnects from, and lists shared network resources (file shares, printers). It has existed since the early NT days and is still one…
lolbins
LOLBins Ubuntu VM What are LOLBins? LOLBins are legitimate system binaries already present on an operating system that attackers abuse for malicious purposes - without ever dropping custom malware.…
inveigh
Inveigh Windows VM In this lab we will Understand why LLMNR and NBT-NS are dangerous on Windows networks Run Inveigh on a Windows machine Capture NTLMv2 hash via HTTP NTLM poisoning Analyze what was…
impacket
Impacket Ubuntu VM In this lab we will Stand up a local SMB server (Samba) as our "target" Use Impacket to: List SMB shares Browse directories Upload and download files (Optional) query basic SMB/RPC…
hashcat
Haschat Ubuntu VM In this lab we will be getting started with the fundamentals of password cracking. We will be using Hashcat to do this. After you open a terminal, we need to gain root access by…
Kerberoasting
Kerberoasting Kerberoasting is an Active Directory attack technique that targets service accounts It does not rely on malware or exploits. Instead, it abuses how Kerberos authentication is designed to…
Internal Password Spray
Internal Password Spray A password spray attack is when an attacker tries a small set of commonly used passwords across a large number of accounts. Instead of hammering one account with hundreds of…