7 Minute Security

Today we continue the series on  eating your own security dog food ! Specifically, we talk about: Keeping a log and procedure for sanitizing systems Keeping a log and procedure for  provisioning  systems A big "gotcha" to be aware of when using Windows system dropboxes - make sure your Windows user account doesn't expire, because Splashtop doesn't have any way to update it! To prevent this, set th...

Hey everybody! I stayed in a hotel for the first time in over a year and boy oh boy...I hope I didn't get COVID from the bedsheets! Anyhow, on that journey I thought of some things that I think will help your business on the marketing/project management/sales side to be more successful and less annoying. DISCLAIMER: I have no formal training in these areas, but I've been on both sides of the table...

Welp, I need another security certification like I needed a bunch to the retinas, but even after all the fun (and pain) of  CRTP  I couldn't help but sign up for the maiden voyage of  Attacking and Defending Azure AD Cloud - a.k.a. CARTP . This cert comes to us from our friends over at  Pentester Academy , and is all about pwning things in Azure AD which is mostly new ground for me. I this episode...

Hey friends!  Today Joe "The Machine" Skeen (a.k.a.  Gh0sthax ) and I talk about some of our favorite news stories, including: FBI removes hacker back doors NSA: 5 security bugs under active nation-state cyberattack Ubiquiti is accused of covering up a 'catastrophic' data breach — and it's not denying it .  On a side note, enjoy our podcast about how we lost our love for Ubiquiti a while back:  7M...

Today our friend Christopher Fielder of Arctic Wolf joins us on the show again (check out his first appearance in  episode #444  - this time to talk about the security journey, and how to start out in your "security diapers" and mature towards a stronger infosec program. Specifically, we talk about: When the company has  one  person in charge of IT/security, how can you start taking security serio...

In the last two episodes of this series ( #449  and  #450 ) we've been diving into how to not only speed up the process of spinning up a DIY pentest dropbox, but how to  automate  nearly the entire build process! In today's episode we talk specifically about how to streamline the Windows 10 build process. As previously mentioned,  this article  is awesome for creating a core Win 10 answer file tha...

Today we talk through our first engagement using  Hak5 Key Croc  to steal and exfil data. In the past, my internal monologue when a new Hak5 toy is released sounds like this: "I certainly don't need another Hak5 doo-dad! The last one didn't ever work that great, and ended up in a drawer full of past Hak5 doo-dads that didn't work that great." "Whaaaaat? A new cool and hip video for the INSERT_CATC...

OK I probably say this every time, but I'm gonna say it again: this tale of pwnage is my one of my favs - and not because of the tools/tradecraft, but because of  why  the company needed our help in the first place. I think I'd file this under the category of "rescue and recovery mission" more than a pentest, but it was a total blast. I also cover a few tangents, including how COVID shot #2 gave m...

Hey friends!  Warning: this is not a "typical" 7MS episode  where we try hard to deliver  some  level of security value. Instead, today is a big, fat, crybaby, first-world problems whine-fest about how I  used  to love my  UniFi  gear for many years, but then a few weeks ago I hit unhealthy levels of rage while working with it...and subsequently completely ripped it all out of the wall and threw i...

Happy mid-March! Our good pal  Gh0sthax  joins us today for another hot dish of cyber news! Stories include: Microsoft Exchange cyber attack  - Hacker News has a nice  what we know so far  story, but things have evolved  really  fast, so make sure you check Microsoft's  primary advisory , the  script to run on local servers  and newer updates such as the recent  one-click remediation for unsupport...

Today we're super excited to share a featured interview with Tanya Janca of  WeHackPurple ! Tanya has been in software development from the moment she was of legal age to work in Canada - beginning by working with some huge companies (Nokia/Adobe) before falling in love with application security and eventually starting a company of her own.   Gh0sthax  and I sat down with Tanya over Zoom to discus...

Hi! This episode of pentest pwnage is a fun one because it was built for  speeeeeeeeeeeeeeeed . Here's some of the things we're doing/running when time is of the essence: Get a cmd.exe spun up in the context of your AD user account: runas /netonly /user:samplecompany\billybob "C:\windows\system32\cmd.exe" Then get some important info in  PowerView : Get-DomainUser -PreAuthNotRequired  - find AD us...

Hello friends!  Today, Joe ( Gh0sthax ) and I complete our series on  CRTP - Certified Red Team Professional  - a really awesome pentesting training and exam based squarely on Microsoft tools and tradecraft.  Specifically, Joe and I talk about: We  don't  think the training/exam is for beginners, despite how its advertised Both the lab PDF and PowerPoint have their own quirks - which may ultimatel...

Hey everybody! Sorry that we're late again with today's episode, but I got COVID shot #2 and it kicked my behind BIG TIME today. But I'm vertical today and back amongst the living and  thrilled  to be sharing with you another tale of pentest pwnage! Yeah! This might be my favorite tale yet because: I got to use some of my new  CRTP  skills! Make sure on your pentests that you're looking for "roast...

Happy almost-mid-February! Today  Gh0sthax  cooked up some great news stories for us to chew on, including: Sudo bug gives root access to mass numbers of Linux systems! What the heck is hammering with GameStop stock?  - this  tweet  does a great job of explaining it in plain English Solarwinds continues to be a gift that keeps on giving malware-laced gifts that people don't want Sonicwall was hack...

Today's featured interview is with  Marcello Salvati of Black Hills Information Security . Marcello is a.k.a.  byt3bl33d3r , and known for his many contributions to the security community. We here at 7MS first became familiar with his work after using  CrackMapExec  on our penetration tests, and today we sat down with Marcello to discuss: Brian's Chris Farley moment with Marcello Marcello's infose...

Hey everyone! Hope you're having a great week. Today  Gh0sthax  and I do a brain dump and recap of a cool (and mind-exploding) course we took last week called  Enterprise Attacker Emulation and C2 Implant Development . In the tangent department, we also touch a bit on: The Fargo TV series Our upcoming interview with Marcello (a.k.a.  byt3bl33d3r ) from  BHIS This  Key and Peele sketch I just took...

Today we talk about a cool product called  Deep Freeze , which, as its name implies, can "freeze" your computer in a known/good/frozen state. Then you can do whatever the flip you want to the machine (install icky things, tamper with C:\windows, pack your browser full of shady plugins, and more!), and then just reboot to restore! Note: this is not a sponsored episode, but will probably sound like...

Hey friends! We're continuing our  series on pentest dropbox building  - specifically playing off  last week's episode  where we started talking about  automating  the OS builds that go on our dropboxes. Today we'll zoom in a little closer and talk about some of the specific scripting we do to get a Windows 2019 Active Directory Domain Controller installed and updated so that it's ready to electro...

Happy new year! This episode continues our series on  DIY pentest dropboxes  with a focus on  automation  - specifically as it relates to automating the build of Windows 10, Windows Server 2019, Kali and Ubuntu VMs. Here's the resources I talk about in more detail on today's episode that helps make the auto magic  happen: Windows VMs This article from  Windowscentral.com  does a great job of walki...

Today,  Gh0sthax  and I talk about week 3/4 of the  CRTP - Certified Red Team Professional  training, and how it's kicking our butts a bit. Key points include: We agree this is  not  a certification for folks who are new to pentesting Don't expect to be following along "live" with the instructor during the training sessions You'll need to do a flippin'  ton  of studying and practicing on your own...

Merry Christmas! Happy holidays! Please enjoy the last cyber news edition of 2020, brought to us by our good pal Gh0stHax . Stories covered include: You've probably heard this by now, but  FireEye had a breach  that was  truly  sophisticated. Here's a really nice  plain English breakdown  of the situation for folks who may not be interested in the deep technical details. Chris Krebs, former CISA d...

Today's episode continues  part 1  of our series on the  Certified Red Team Professional  certification. Key points from today's episode include: It's probably a better idea to run  Bloodhound  on your local machine so you don't crush the student VM's resources Running  Invoke-Command  is one of my new favorite things. Check  this post  for a bunch of cheatsheet tips for running commands in PowerS...

Welp, I need another certification like I need a hole in the head, but that didn't stop me from signing up for the  Certified Red Team Professional . So I've started a series on sharing what I'm learning as I proceed through the certification path.  (We're also talking about this on the  7MS forums ) Here are some of the highlights from week 1: Boy oh boy is  PowerView  handy for extracting juicy...

Happy December! Today I virtually sat down with Christopher Fielder of  Arctic Wolf , who started his career in security at  18  (I was just playing a lot of video games when I was that old)! Christopher has served in the Air Force, worked for a university and SANS, served for some three-letter organizations - and more! Christopher and I had a great chat about a variety of security topics, includi...