7 Minute Security

Today we're continuing a series we haven't done in a while (click  here  to see the whole series) all about building and deploying pentest dropboxes for customers. Specifically, we cover: Auto installing Splashtop This can be done automatically by downloading your  splashtop.exe  install and issuing this command: splashtop.exe prevercheck /s /i confirm_d=0,hidewindow=1,notray=0,req_perm=0,sec_opt=...

In today's episode I talk about a cool  self-defense class  I took a while ago which was all about less lethal methods of protecting/defending yourself. I also talk about some safer ways to handle/hide cash while traveling on vacation.

Today we continue the series we started a few years ago called Security Your Family During and After a Disaster (the last part in this series was from  a few years ago . In today's episode we focus on some additional things you should be thinking about to strengthen the "in case of emergency" document you share with your close friends and family.

Welcome to another fun tale of pentest pwnage! This one isn't a telling of one single pentest, but a collection of helpful tips and tricks I've been using on a bunch of different tests lately. These tips include: I'm seeing nmap scans get flagged a bit more from managed SOC services. Maybe a "quieter" nmap scan will help get enough ports to do a  WitnessMe  run, but still fly under the logging/ale...

Today we're joined by our friends Christopher Fielder and Jon Crotty from Arctic Wolf to talk about their interesting report on  The State of Cybersecurity: 2022 Trends  (note: you can get some of the report's key points  here  without needing to provide an email address). The three of us dig in to talk about some of the report's specific highlights, including: Many orgs are running the bare minim...

Today I'm sharing some first impressions of the Rapid 7  InsightIDR  as kind of a teaser for an eventual new chapter in our  Desperately Seeking a Super SIEM for SMBs  series. Disclaimer: remember these are  first impressions . There may be some missed detections I talk about today that are a  me  problem and not the technology. I hope to get to the root of those unresolved issues by the time I ta...

Today we're continuing our series focused on [owning a security consultancy], talking specifically about: How  not  to give up on warm sales leads, even if they haven't panned out for 5+ years! Some cool Mac tools that help me manage 7MS - such as  Craft  and  OmniFocus A sneak peek at a SIEM vendor that will soon be featured in an episode of  Desperately Seeking a Super SIEM for SMBs  

Today we share some first impressions of  Tailscale , a service that advertises itself as "Zero config VPN. Installs on any device in minutes, manages firewall rules for you, and works from anywhere." Is it really  that  cool and easy? Listen to today's episode to find out!

Today we revisit our  phishing series  with a few important updates that help us run our campaigns more smoothly, such as creating a simple but effective fake O365 portal, and being aware that some email systems may "pre-click" malicious links before users ever actually do.

Hey friends! We have another fun test of pentest pwnage to share with you today, which is kind of tossed in a blender with some first impressions of  ShellcodePack . We were on a bunch of pentests recently where we needed to dump credentials out of memory. We usually skim  this article  and other dumping techniques, but this time nothing seemed to work. After some discussion with colleagues, we we...

Today's featured interview is with Matthew Warner, CTO and co-founder of  Blumira . We had a great chat about why out-of-the-box Windows logging isn't super awesome, "free" ways to get logging turned up to 11 ( Microsoft's audit policy recommendations ,  sysmon ,  sysmon modular ), as well as how to get better logging in hard-to-reach places like  Kerberos . Be sure to also check out Blumira's res...

Today's my favorite tale of pentest pwnage (again)! This time we're talking about  sAMAccountName spoofing  specifically. We also talk about my always-under-construction list of things I try early in a pentest for maximum pwnage: Run  PingCastle Do the SharpHound/BloodHound dumps Run the DHCP poisoning module of  Responder Check the  ms-DS-MachineAccountQuota  value in the domain - if its at the d...

Hey friends, today I talk about the old school way I used to pwn wifi networks, then a more modern way, and then my new  favorite  way (spoiler alert: I use  Bettercap ).

Hey friends, today we're talking about how to monitor all your cloud thingies (Web servers, mail servers, etc.) with  UptimeRobot .  And  I'm sharing some fun tips to monitor your  internal  thingies as well - without the use of any extra agent software.

Today's episode is all about  Brute Ratel , a command and control center that is super cool, quick to setup, and much easier to use (IMHO) than Cobalt Strike. I also talk specifically about some of my favorite command line features, how slick and simple lateral movement is, and the "killer feature" that makes me giggle like the bad guy from Sonic the Hedgehog. In the tangent department, Mrs. 7MS m...

Happy new year friends! Today I share the good, bad, ugly, and BROKEN things I've come across while migrating our  Light Pentest LITE  training lab from on-prem VMware ESXi to Azure. It has been a fun and frustrating process, but my hope is that some of the tips in today's episode will save you some time/headaches/money should you setup a pentesting training camp in the cloud. Things I like No lon...

Today we're closing down 2021 with a tale of pentest pwnage - this time with a path to DA I had never had a chance to abuse before: Active Directory Certificate Services! For the full gory details on this attack path, see the  Certified Pre-Owned  paper from the SpecterOps crew. The TLDR/TLDL version of how I abused this path is as follows: Grab  Certi Grab  Certify Run  Certify.exe find /vulnerab...

HAPPY 500 EPISODES, FRIENDS! That's right, 7MS turned 5-0-0 today, and so we asked John Strand of  Black Hills Information Security  to join us and talk about all things security, including the John/BHIS superhero origin story, the future of pentesting, the (perceived) cybersecurity talent shortage,  how to get started with good security practices in your organization , and more! P.S. check out Jo...

Today we have some cool updates on this SIEM-focused series we've been doing for a while. Specifically, I want to share that one of these solutions can now detect three early (and important!) warning signs that bad things are happening in your environment: ASREPRoasting WDigest flag getting flipped ( reg add HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest /v UseLogonCredential /t R...

Hi everybody, today we're continuing a series we started way back in June called  Securing Your Mental Health . Today I talk about some easy and relatively cheap things I'm doing to try and shutdown negative thoughts, punch imposter syndrome in the face, and be an overall happier and more positive person.  

Hey friends, today I'm giving you a peek behind the curtain of our  Light Pentest LITE  training to talk about the software/hardware we use to make it sing, the growing pains - and OMG(!) moments - that forced us to build in more infrastructure redundancy, and the cool (and expensive!) cloud options we're considering to offer a self-paced version of the course.

Today's tale of pentesting has a bunch of tips to help you maximize your pwnage, including: The new  Responder DHCP poisoning module All the cool bells and whistles from  CrackMapExec  which now include  new lsass-dumping modules ! Speaking of lsass dumping, here's a  new trick  that works if you have Visual Studio installed (I bet it will be detected soon). I close out today's episode with a stor...

Today we continue our  SIEM/SOC evaluation series  with a closer look at one particular managed solution and how it fared (very well) against a very hostile environment: the  Light Pentest LITE  pentesting course! Spoiler alert: this solution was able to detect: RDP from public IPs Password spraying Kerberoasting Mimikatz Recon  net  commands Hash dumping Hits on a "honey domain admin" account Use...

Hey, remember back in  episode #357  where we introduced  7MOIST  ( 7   M inutes  o f  I T and  S ecurity  T ips)? Yeah, me neither :-). Anyway, we're back with the second edition of 7MOIST and have some cool pentesting and general IT tips that will hopefully make your life a little awesome-r: Stuck on a pentest because EDR keeps gobbling your payloads?  SharpCradle  might just save the day! Crack...