7 Minute Security
Dettagli canale
7 Minute Security
7 Minute Security is a weekly information security podcast focusing on penetration testing, blue teaming and building a career in security. The podcast also features in-depth interviews with industry leaders who share their insights, tools, tips and tricks for being a successful security engineer.
Episodi recenti
696 episodi
7MS #695: Tales of Pentest Pwnage - Part 78
Today’s tale of pentest pwnage involves:
Don’t forget to check out our weekly Tuesday TOOLSday – live every Tuesday at 10 a.m. over at 7MinSec.c...
7MS #694: Tales of Pentest Pwnage – Part 77
Hey friends, today I talk about how fun it was two combine two cool pentest tactics, put them in a blender, and move from local admin to mid-tier syst...
7MS #693: Pwning Ninja Hacker Academy – Part 3
This week your pal and mine Joe “The Machine” Skeen kept picking away at pwning Ninja Hacker Academy. To review where we’ve been in parts 1 and 2:
7MS #692: Tales of Pentest Pwnage – Part 76
Happy Friday! Today’s another hot pile of pentest pwnage. To make it easy on myself I’m going to share the whole narrative that I wrote up for someone...
7MS #691: Tales of Pentest Pwnage – Part 75
Holy schnikes, today might be my favorite tale of pentest pwnage ever. Do I say that almost every episode? yes. Do I mean it? Yes. Here are all the co...
7MS #690: Tales of Pentest Pwnage – Part 74
Today’s tale of pentest pwnage is a classic case of “If your head is buried in the pentest sand, pop it out for a while, touch grass, and re-enumerate...
7MS #689: Pwning Ninja Hacker Academy – Part 2
Hello friends! Today your friend and mine, Joe “The Machine” Skeen joins me as we keep chipping away at pwning Ninja Hacker Academy! Today’s pwnage...
7MS #688: Building a Pentest Training Course Is Fun and Frustrating
Today I talk about a subject I love while also driving me crazy at the same time: building a pentest training course! Specifically, I dissect a fun/fr...
7MS #687: A Peek into the 7MS Mail Bag – Part 5
Hi friends, we’re doing something today we haven’t done in a hot minute: take a dip into the 7MinSec mail bag! Today we cover these questions:
7MS #686: Our New Pentest Training Course is Almost Ready
Oh man, I’m so excited I can hardly sleep. Our new three-day (4 hours per day) training is getting closer to general release. I talk about the good/ba...
7MS #685: The Time My Neighbor Almost Got Scammed Out of $13K
Today’s kind of a “story time with your friend Brian” episode: a tale of how my neighbor almost got scammed out of $13k. The story has a lot of red f...
7MS #684: Pwning Ninja Hacker Academy
Hey friends, today we start pwning Ninja Hacker Academy – cool CTF-style lab that has you start with no cred and try to conquer domain admin on two do...
7MS #683: What I'm Working on This Week - Part 4
This week I’m working on a mixed bag of fun security and marketing things:
7MS #682: Securing Your Family During and After a Disaster – Part 7
Today’s episode is a downer! We talk about things you might want to have buttoned up for when you are eventually not alive anymore:
I also talk...
7MS #681: Pentesting GOAD – Part 3
Today Joe “The Machine” Skeen and I pwn the third and final realm in the world of GOAD (Game of Active Directory): essos.local! The way we go about i...
7MS #680: Tips for a Better Purple Team Experience
Today I share some tips on creating a better purple team experience for your customers, including:
7MS #679: Tales of Pentest Pwnage – Part 73
In today’s tale of pentest pwnage I talk about a cool ADCS ESC3 attack – which I also did live on this week’s Tuesday TOOLSday. I also talk about Exe...
7MS #678: How to Succeed in Business Without Really Crying – Part 22
Today I share some tips on presenting a wide variety of content to a wide variety of audiences, including:
7MS #677: That One Time I Was a Victim of a Supply Chain Attack
Hi everybody. Today I take it easy (because my brain is friend from the short week) to tell you about the time I think my HP laptop was compromised at...
7MS #676: Tales of Pentest Pwnage – Part 72
Today’s fun tale of pentest pwnage discuss an attack path that would, in my opinion, probably be impossible to detect…until it’s too late.
7MS #675: Pentesting GOAD – Part 2
Hey friends! Today Joe “The Machine” Skeen and I tackled GOAD (Game of Active Directory) again – this time covering:
Join us next month when we...
7MS #674: Tales of Pentest Pwnage – Part 71
Today’s tale of pentest pwnage is another great one! We talk about:
7MS #673: ProxmoxRox
Today we’re excited to release ProxmoxRox – a repo of info and scripts to help you quickly spin up Ubuntu and Windows VMs. Also, some important news...
7MS #672: Tales of Pentest Pwnage – Part 70
Today’s a fun tale of pentest pwnage where we leveraged a WinRM service ticket in combination with the shadow credentials attack, then connected to an...
7MS #671: Pentesting GOAD
Hello! This week Joe “The Machine” Skeen and I kicked off a series all about pentesting GOAD (Game of Active Directory). In part one we covered:
7MS #670: Adventures in Self-Hosting Security Services
Hi friends, today I’m kicking off a series talking about the good/bad/ugly of hosting security services. Today I talk specifically about transfer.zip....
7MS #669: What I’m Working on This Week – Part 3
Hi friends, in this edition of what I’m working on this week:
7MS #668: Tales of Pentest Pwnage – Part 69
Hola friends! Today’s tale of pentest pwnage talks about abusing Exchange and the Azure ADSync account! Links to the discussed things:
7MS #667: Pentesting GOAD SCCM - Part 2!
Hey friends, our good buddy Joe “The Machine” Skeen and I are back this week with part 2 (check out part 1!) tackling GOAD SCCM again! Spoiler alert:...
7MS #666: Tales of Pentest Pwnage – Part 68
Today we have a smattering of miscellaneous pentest tips to help you pwn all the stuff!
7MS #665: What I'm Working on This Week - Part 2
Hello there friends, I’m doing another “what I’m working on this week” episode which includes:
7MS #664: What I’m Working on This Week
In today’s episode I talk about what I’m working on this week, including:
7MS #663: Pentesting GOAD SCCM
Today we live-hack an SCCM server via GOAD SCCM using some attack guidance from Misconfiguration Manager! Attacks include:
7MS #662: Pentesting Potatoes - Part 2
Hi friends, today we're talking about pentesting potatoes (not really, but this episode is sort of a homage to episode 333 where I went to Boise to do...
7MS #661: Baby’s First Hetzner and Ludus – Part 2
Today we continue our journey from last week where we spun up a Hetzner cloud server and Ludus.cloud SCCM pentesting range! Topics include:
7MS #660: Baby's First Hetzner and Ludus
I had an absolute ball this week spinning up my first Hetzner server, though it was not without some drama (firewall config frustrations and failing h...
7MS #659: Eating the Security Dog Food - Part 8
Today I’m excited about some tools/automation I’ve been working on to help shore up the 7MinSec security program, including:
7MS #657: Writing Rad Security Documentation with Retype
Hello friends! Today we’re talking about a neat and quick-to-setup documentation service called Retype. In a nutshell, you can get Retype installed...