Resources
BHIS Blog
Current cybersecurity commentary and technical guidance.
Shodan
Shodan Goal: Learn what Shodan can do using the web interface In this lab you will Understand what Shodan is and how it works Use the Shodan web UI to search the internet Read service banners and…
scoutsuite
ScoutSuite For the Ubuntu VM The objective of this lab is to use Scout Suite to audit an AWS cloud environment and identify critical security misconfigurations related to Identity Access Management…
osint
OSINT Ubuntu VM In this lab we will Harvest emails, subdomains, and IPs from public sources using theHarvester Hunt usernames across dozens of social platforms using Sherlock Extract DNS and domain…
Nuclei
Nuclei Ubuntu VM Lab Goal This lab introduces Nuclei , a fast vulnerability scanner based on templates. You will: Deploy OWASP Juice Shop (intentionally vulnerable app) Run basic Nuclei scans…
Metasploit
Metasploit Ubuntu VM In this lab we will Install Metasploit Framework (simple, standard install) Learn the Metasploit console basics ( , , , options) Create a safe local target service (an FTP server…
hashcat
Haschat Ubuntu VM In this lab we will be getting started with the fundamentals of password cracking. We will be using Hashcat to do this. After you open a terminal, we need to gain root access by…
GoPhish
GoPhish Ubuntu VM This lab demonstrates what GoPhish can do from both an attacker and defender perspective You will install GoPhish , launch a phishing campaign , and observe captured credentials and…
gato x
Gato-X Ubuntu VM Background - What is Gato-X? Gato-X is an open-source GitHub Actions security auditing tool. It was built to help security teams find misconfigurations in GitHub Actions workflows…
Exploit DB
Exploid DB Ubuntu VM In this lab we will Learn how to search for public exploits Understand exploit metadata Copy and inspect exploit code Basic Exploit Searching Search for exploits related to Apache…
Evilginx
Evilginx Lab Goal The goal of this lab is to introduce Evilginx , a reverse-proxy phishing framework that has been used in real-world phishing campaigns. In this lab, we will demonstrate how attackers…
credmaster
CredMaster Ubuntu VM What is CredMaster? CredMaster is a password spraying framework used by penetration testers and red teams. Unlike brute-force attacks that try every password against one account,…
caido
Caido Lab Goal The goal of this lab is to introduce Caido and its core web application security testing features. The lab uses the free Caido Basic plan and Damn Vulnerable Web Application (DVWA) as…