7 Minute Security

This episode discusses an important and rhetorical (to me) infosec question: Should phishing campaigns be "fair?"

Today I talk about one of the most moving films I've ever seen - a documentary called Alive Inside.

In this episode I complain about getting stuck in NY for two days, and also how to efficiently scan for vulnerabilities when your time is crunched.

We're going off-topic today and talking about the new(ish) movie about Brian Wilson's life called Love and Mercy.

Part 3 on my series about PCI pentesting. Yeah. That.

Yep, this episode is EXACTLY what the title implies.

This episode is about one of my favorite enumeration tools called Sparta - it's built right into Kali 2. And maybe it was in Kali 1 and I totally missed it. But whatevs. I'm happy to have found it now!

The thrilling (?) conclusion of my experience hacking WPA Enterprise.

This episode is about my experience hacking WPA enterprise. Huge mega tiger uppercut thanks to this site for giving me the fixes I needed to get this working on Kali2! https://warroom.securestate.com/index.php/evil-twin-attack-using-hostapd-wpe/

Movie reviews of It Follows and Backcountry.

Here's part 2 (of probably several to come) about my experience with PWAPT (Practical Webapp Pentesting) training last week!

Hey I'm going to PWAPT this week ( http://www.eventbrite.com/e/practical-web-application-penetration-testing-with-tim-tomes-lanmaster53-tickets-16718889649 ), so in this episode I talk about that...and how I'll probably be too info-overloaded to record anything on Thursday :-). Oh, and I had a fun Web app pentest this week that I wanted to share some fun bits on.

A listener wrote in asking some questions about "a day in the life of" a security analyst, so here's my best stab at it!

Today's totally random episode covers: 1. How bad does this podcast's logo suck? 2. Does this podcast need a theme song? 3. Some interesting training I'm taking next week. 4. The Walking Dead - who should die? 5. Metal Gear Solid and my personal godmode strategy.

Hey I just got a LANTurtle and....these are my first impressions!

This is an off-topic episode about the time I was in the holiday comedy super-smash laugh-fest, Jingle All the Way.

I'm a big fan of Recon-ng and you should be too! Check it out - and learn more about Tim Tomes, its creator - at www.lanmaster53.com. And here's the video I mentioned in the podcast - my first look at Recon-ng in action: https://www.youtube.com/watch?v=vkmNTNl6urw

The new(ish) Chris Farley documentary is fantastic - see it!

Ever had an assessment that you thought would be the death of you? I had one recently, but after sticking it out, it turned out to be a blessing in disguise.

Today's episode gives you some tips on how to deliver bad news in an assessment in a positive way. I think that last sentence was a grammatical nightmare.

So far I've focused on the technical aspects of PCI, but I'm trying to get familiar with the overall scoping questions that my tenacious QSA friends ask when they start a gap analysis. This episode shares some interesting tidbits I learned while doing some QSA "shadowing" on an assessment of a restaurant.

We're going off topic today and talking about video games! LIMBO for the Xbox!

Yep, we're talking about how to make ENEMIES during a security assessment today (and maybe turn them into friends).

When you start a security assessment with a company, not everybody's gonna be glad to see you. The IT dept and other employees may have tense shoulders, thinking that this is an Office Space situation where they're interviewing for their jobs. This episode talks about some ways you might be able to get your assessment off to a right start.

I've been looking for better ways to learn Burp Suite and I struck gold! Check out my recommendations in today's episode!