Resources
BHIS Blog
Current cybersecurity commentary and technical guidance.
havok
Havoc Framework Ubuntu VM, Windows VM & AWS Cloud Lab Objective The objective of this lab is to establish a modern Command & Control (C2) infrastructure using a cloud-based backend (AWS EC2). You will…
gost
Gost Please Use The Windows VM Lab Objective The objective of this lab is to use Gost to establish an encrypted WebSocket (WSS) tunnel over port 443, bypassing simulated egress firewall rules to…
HTTP As Exfil
HTTP As Exfil HTTP exfiltration happens when an attacker uses normal web traffic to move stolen data out of a compromised system. Instead of using obvious malicious channels, they blend into regular…
HTTPS As Exfil
HTTPS As Exfil Once an attacker is inside a system, they need to get the data out. The obvious problem: the network is being watched. Firewalls block weird ports. Security tools flag unusual traffic.…
Domain Name System As C2
Domain Name System(DNS) As C2 Every device on the internet needs DNS to function. It's the protocol that translates domain names like into IP addresses your computer can actually connect to. Because…
Domain Fronting As C2
Domain Fronting as C2 Once an attacker has a foothold inside a network, they need a way to communicate with their tools remotely. That communication channel is called Command and Control , or C2. The…
HTTP As Exfil CTF Quiz
Test your knowledge of HTTP As Exfil with this CTF quiz!
HTTPS As Exfil CTF Quiz
Test your knowledge of HTTPS As Exfil with this CTF quiz!
Domain Name System As C2 CTF Quiz
Test your knowledge of Domain Name System As C2 with this CTF quiz!
Domain Fronting As C2 CTF Quiz
Test your knowledge of Domain Fronting As C2 with this CTF quiz!
Cloud Based Services As Exfil CTF Quiz
Test your knowledge of Cloud Based Services As Exfil with this CTF quiz!
Background Intelligent Transfer Service As Exfil CTF Quiz
Test your knowledge of Background Intelligent Transfer Service As Exfil with this CTF quiz!