Black Hills Information Security
LightNews LightNews
banner
bhinfosecurity.bsky.social
Black Hills Information Security
@bhinfosecurity.bsky.social
3.3K followers 240 following 370 posts
Specializing in pen testing, red teaming, and Active SOC. We share our knowledge through blogs, webcasts, open-source tools, and Backdoors & Breaches game.

blackhillsinfosec.com & poweredbybhis.com
Posts Replies Media Videos
bhinfosecurity.bsky.social
This Thursday @strandjs.bsky.social join us to talk about China!

A cross between history and technology John breaks down exactly what he will be discussing in his webcast here!

Interested? Come join us and register here: events.zoom.us/ev/AhsoFeh2O...
November 11, 2025 at 11:00 PM
bhinfosecurity.bsky.social
Join us for this week's ⁠infosec-news stories with the Black Hills Infosec team live at 4:30pm ET on Mondays -- www.youtube.com/watch?v=hWJG...
November 10, 2025 at 8:46 PM
bhinfosecurity.bsky.social
There's a reason Netcat is called the swiss army knife of networking. Rachit A. walks us through how to install and utilize Netcat in our arsenal.

UNIX Verison:
nc110.sourceforge.io
sourceforge.net/p/nc110/git/...

GNU Verison:
netcat.sourceforge.net
sourceforge.net/p/netcat/cod...
November 5, 2025 at 7:21 PM
bhinfosecurity.bsky.social
When forming an infosec team hiring the right person will shape the future of your team's success.

How to Accelerate Finding and Professionally Developing Talent - youtu.be/pXn0ai5DPdE?...

What Do Red Team Hiring Managers Want? | Kip Boyle | | Offensive Con 2023 - youtu.be/nhfwbUHGxVg?...
November 4, 2025 at 6:53 PM
bhinfosecurity.bsky.social
If you’re attending today’s webcast with Joff Thyer we would love for you to take chance to fill out a quick survey after! Your answers will help us when creating webcast in future. Your participation is always voluntary. Thank you!

Find it here -- www.surveymonkey.com/r/GSWB6JJ
October 30, 2025 at 4:03 PM
bhinfosecurity.bsky.social
Do you know what MCP stands for? Before we dive into AI Agents and MCP Security Risks Joff Thyer explains what the Model Context Protocol is all about.

If you want to learn more about MCP & the security risk join us tomorrow, Oct 30, 2025 at 1:00 PM EDT!

Register - events.zoom.us/ev/Ahn_6DM5I...
October 29, 2025 at 9:10 PM
bhinfosecurity.bsky.social
The good folks at @fortraofficial maintains the highly useful post exploitation tool Impacket!

Ashley K. and Eric Harashevsky created a cheat sheet to help you utilize the tool to its fullest! Checkout the cheat sheet below and download Impacket here -- github.com/fortra/impac...
October 29, 2025 at 4:02 PM
bhinfosecurity.bsky.social
Buckle Up Final part!

You can order your copy of the ANTISOC issue here -- spearphish-general-store.myshopify.com/products/pro...

Read the entire ANTISOC issue for free here -- www.blackhillsinfosec.com/prompt-zine/...
October 28, 2025 at 4:28 PM
bhinfosecurity.bsky.social
Join us for this week's ⁠infosec-news stories with the Black Hills Infosec team live at 4:30pm ET on Mondays - - www.youtube.com/watch?v=9Go8...
October 27, 2025 at 8:03 PM
bhinfosecurity.bsky.social
Another great webcast by Ashley K. if you missed it the entire webcast is currently on our Youtube channel -- www.youtube.com/watch?v=DCDp...

Let's continue learning by looking back at when Alyssa Snow and Kaitlyn Wimberley taught us how to exploit ADCS!

Watch -- www.youtube.com/watch?v=pyya...
October 23, 2025 at 10:19 PM
bhinfosecurity.bsky.social
If you’re attending today’s webcast with Ashley K. on Intro to Network Pentesting, we would love for you to take chance to fill out a quick survey after! Your answers will help us when creating webcast in future. Your participation is always voluntary. Thank you -- www.surveymonkey.com/r/CTT9LPJ
October 23, 2025 at 3:47 PM
bhinfosecurity.bsky.social
You know hashcat, and if you don't know hashcat you NEED to know hashcast. So Hsiaoan Wang created a cheat sheet so you utilize the tool to it's fullest extent.
github.com/hashcat/hash...

For an expansive cheat sheet -- www.blackhillsinfosec.com/wp-content/u...
October 22, 2025 at 8:44 PM
bhinfosecurity.bsky.social
Join us for this week's ⁠infosec-news stories with the Black Hills Infosec team live at 4:30pm ET on Mondays - - youtube.com/live/AX_QYGi...
October 20, 2025 at 7:48 PM
bhinfosecurity.bsky.social
Another day, another tool for the arsenal. Kaitlyn Wimberley’s walks us through Beau Bullock’s GraphRunner!

Grab the post-exploitation toolset here -- github.com/dafthack/Gra...

Learn more -- www.blackhillsinfosec.com/introducing-...
October 15, 2025 at 5:40 PM
bhinfosecurity.bsky.social
Buckle up! Let's go for a ride! When you Assume......Pt 1.
October 14, 2025 at 8:30 PM
bhinfosecurity.bsky.social
The web leaves clues. EyeWitness collects receipts. Gather information from web services in a whole new way with @redsiege.com's EyeWtiness!

Chris Traynor breaks down the tool so you can add it to your aresnal!

Download it on Github -- github.com/RedSiege/Eye...
October 8, 2025 at 7:54 PM
bhinfosecurity.bsky.social
Want to learn more about our ANTISOC services?

Corey Ham breaks down what we call ANTISOC and its purpose!

Find out more here -- www.blackhillsinfosec.com/services/ant...
October 7, 2025 at 7:30 PM
bhinfosecurity.bsky.social
Hackers don’t waste time — and neither should you.

Michael Allen created DNS Triage, a reconnaissance tool that quickly finds information about an organization’s infrastructure, software, and third-party services.

Download it here -- github.com/Wh1t3Rh1n0/d...
October 1, 2025 at 7:39 PM
bhinfosecurity.bsky.social
As new vulnerabilities emerge, the race to identify and mitigate them begins.

But how do we pinpoint these threats as they become public?

Matthew Eidelberg dive into the fascinating world of vulnerability identification to show us how the magic happens!
September 30, 2025 at 7:20 PM
bhinfosecurity.bsky.social
Issue #6 of THE FUTURE IS ****** is available on October 8th in 600+ comic shops!

The comic book series is like Black Mirror meets Mission Impossible and Hackers.

CTF challenges in each issue -- score points! www.tficomic.io

Let us know if your comic shop carries it so we can thank them.
September 26, 2025 at 7:37 PM
bhinfosecurity.bsky.social
If you’re attending today’s webcast with Dale Hobbs we would love for you to take chance to fill out a quick survey after! Your answers will help us when creating webcast in future. Your participation is always voluntary. Thank you!

Survey -- www.surveymonkey.com/r/XC8H3KB
September 25, 2025 at 6:13 PM
bhinfosecurity.bsky.social
In tomorrow's webcast Dale Hobbs will be teaching us about the tool NetExec. Before we do a deep dive, Dale joined us briefly to talk a little about NetExec 8 why should you have this tool in your arsenal.

To learn more join us tomorrow at 12 EST! You can register here -- poweredbybhis.com
September 24, 2025 at 9:34 PM
bhinfosecurity.bsky.social
Hey folks, let's take a look at what's cooking at Antisyphon Training!

Have you wondered how deepfakes are being used in phishing, social engineering, & disinformation?

Then this free 1hr webcast with James McQuiggan is for you!

Wed, Sep 24 12:00 PM EDT

Register: events.zoom.us/ev/AklFZFXF7...
September 23, 2025 at 8:58 PM
bhinfosecurity.bsky.social
Hey folks

Join our free, beginner-friendly one-hour webcast with security analyst Dale Hobbs.

He’ll teach how NetExec tests credentials, finds users & shares, & runs techniques like Pass-the-Hash — no advanced skills required.

Thu, Sep 25, 1:00 PM EDT

Register: events.zoom.us/ev/Atf1QFXLf...
September 23, 2025 at 5:15 PM
bhinfosecurity.bsky.social
Attendees of @wildwesthackinfest.bsky.social can get an exclusive WWHF Edition of The Future Is ******.

Not going? Ask a friend to get one for you if they are going.

The team goes to the con!
September 20, 2025 at 3:12 PM