7 Minute Security

Today's episode is all about writing reports in  Sysreptor .  It's awesome!  Main takeaways: The price is free (they have a paid version as well)! You can send findings and artifacts directly to the report server using the  reptor Python module Warning: Sysreptor  only  exports to PDF (no Word version option!) Sysreptor has helped us write reports faster without sacrificing quality

Hey friends, today we've got a tale of pentest pwnage that covers: Passwords – make sure to look for patterns such as keyboard walks, as well as people who are picking passwords where the month the password changed is part of the password (say that five times fast)! Making sure you go after  cached credentials Attacking SCCM –  Misconfiguration Manager  is an absolute gem to read, and  The First C...

Hey friends, today we have a super fun interview with Andrew Morris of  GreyNoise  to share.  Andrew chatted with us about: Young Andrew's early adventures in hacking his school's infrastructure (note: don't try this at home, kids!) Meeting a pentester for the first time, and getting his first pentesting job Spinning up a box on the internet, having it get popped instantly, and wondering…"Are all...

Hey friends, sorry I'm so late with this (er, last) week's episode but I'm back!  Today is more of a  prep  for tales of pentest pwnage, but topics covered include: Make sure when you're  snafflin ' that you check for encrypted/obfuscated logins and login strings – it might not be too tough to decrypt them! On the defensive side, I've found myself getting *blocked* doing things like SharpHound run...

How much fun I had attending and speaking at  Netwrix Connect Being a sales guy in conference situations without being an  annoying  sales guy in conference situations A recap of the talk I co-presented about high profile breaches and lessons we can learn from them

Today's tale of pentest covers: Farming  for credentials (don't forget to  understand trusted zones  to make this happen properly!) Snaffling  for juice file shares Stealing Kerberos tickets with Rubeus

Hello friends, we're still deep in the podcast trenches this quarter and wanted to share some nuggets of cool stuff we've been learning along the way: Snaffler  – pairs nicely with  PowerHuntShares  to find juicy tidbits within file/folder shares Group3r  – helps you find interesting and potentially abusable Group Policy Object configurations Farmer – totally awesome toolkit for dropping tricky fi...

Hey friends, sorry for the late episode but I've been deep in the trenches of pentest adventures.  I'll do a more formal tale of pentest pwnage when I come up for air, but for now I wanted to share some tips I've picked up from recent engagements: GraphRunner - awesome PowerShell toolkit for interacting with Microsoft Graph API.  From a pentesting perspective, it may help you bridge the "gap" betw...

Hey friends, today we cover a funstrating (that's fun + frustrating) issue we had with our DIY pentest dropboxes. TLDL:   The preseed file got jacked because I had a bad Kali metapackage in it. While I was tinkering around with preseed files, I decided it would be more efficient to have the Kali ISO call that preseed file directly over HTTP (rather than make a new ISO every time I made a preseed c...

Hey friends, today is a first impressions episode about Sysreptor , which according to their GitHub page, is a fully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike .  It is easy to stand up with Docker, has built-in MFA and a great hybrid WYSIWYG/code editor.  The only scary part?  There is no export to Word ( insert...

Hey friends, today our pal Hackernovice joins us for a tool (actually  two tools!)  release party: EvilFortiAuthenticator - it's like a regular FortiAuthenticator , but evil.  This tool allows you to capture the FortiAuthenticator API and subsequently steal the entire device's config, subsequently allowing you to restore the config to a second server and potentially steal cleartext Active Director...

Today we talk about some business-y things like: A  pre  first impressions opinion on  Sysreptor Why I'm not worried about AI replacing manual pentesting (yet) My struggle with going "full CEO" vs. staying in the weeds and working on hands-on security projects

Today our pals  Bjorn Kimminich  from  OWASP  and Paul from  Project7  and  TheUnstoppables.ai  join us as we kick off a series all about hacking the  OWASP Juice Shop , which is "probably the most modern and sophisticated insecure web application!" We got a few wins on the Juice Shop score board today: Found the score board Bullied the chatbot Fired a DOM XSS Located a confidential document Gave...

Today our friend  Amanda Berlin , Lead Incident Detection Engineer at  Blumira , joins us to talk about being more mentally healthy in 2024! P.S. - did you miss Amanda's past visits to the program? Then check out episode  518 ,  536  and  588 . Be sure to check out the next edition of Amanda's  Defensive Security Handbook when it comes out in later January, 2024!

Today we tease two upcoming tool releases (shooting for Q1, 2024): TCMLobbyBBQ  - a Python script for PC players of  The Texas Chain Saw Massacre  game to help players get out of lobbies and into live games ASAP! The script uses  PyAutoGUI  to take screenshots of what part of the game you're in, then make appropriate key presses and mouse clicks to get into lobby queues, then alert you when the ga...

Today I look at potentially replacing  Splashtop  and  UptimeRobot  (check out our episode about it  here ) with  Tailscale  and  Uptime Kuma . The missing link (which I'd love some help with) is answering this security question: how can I setup Tailscale so that my 7MinSec testing box can connect to all these NUCs spread around the globe, but those NUCs  cannot connect to each other (in case one...

Today we're talkin' business! Specifically: How to (gently) say "no" to (some) client projects How to (politely) challenge end-of-year deadlines An idea I'm kicking around in the lab - where I might do away with UptimeRobot and Splashtop in favor of  Tailscale  and  Uptime Kuma

Today our pal Nate Schmitt (you may remember him from his excellent  Dealing with Rejection: A DMARC Discussion  Webinar) joins us to talk about breaking up with Active Directory. He covers: Why would you want to consider removing AD from your environment? What are common items to plan for? What steps should you take to efficiently plan a migration? What common challenges or considerations will yo...

Hey friends, today I share my experience working with ChatGPT,  Ollama.ai ,  PentestGPT  and  privateGPT  to help me pentest Active Directory, as well as a machine called  Pilgrimage from HackTheBox . Will AI replace pentesters as we know them today? In my humble opinion: not quite yet. Check out today's episode to hear more, and please join me on Wednesday, December 6 for my Webinar on this topic...

Today we talk about our first experience working through the responsible disclosure process after finding vulnerabilities in a security product. We cannot share a whole lot of details as of right now, but wanted to give you some insight into the testing/reporting process thus far, which includes the use of: BulletsPassView MITMsmtp mitmproxy

Today our good buddy  Paul  and I keep trying to hack the  VulnHub  machine based on the movie  Billy Madison  (see part  1  and  2  and  3 ). In today's  final  chapter, Paul and I: Find Eric's secret SSH back door Locate and decrypt a hidden file with Billy's homework Build wordlists with  cewl Save Billy from the evil clutches of Eric Gordon!!!

Today we had a blast talking with Robert McCurdy about  JAMBOREE (Java-Android-Magisk-Burp-Objection-Root-Emulator-Easy) ! JAMBOREE allows you to quickly spin up a portable Git/Python/Java environment and much more! From a pentesting POV, you can whip up an Android pentesting environment, BloodHound/SharpHound combo, Burp Suite...the list goes on!

After about a year break ( last edition of this series was in October, 2022 , we're back with an updated episode of How to Succeed in Business Without Really Crying. We cover: Why we're not planning on selling the business any time soon Fast Google Dorks Scan Using ProtonVPN  via command line Our  pre  first impressions of a pentesting SaaS tool you've almost definitely heard of    

Today we're joined by Matt Warner of Blumira (remember him from episodes  #551  and  #529  and  #507 ?) to talk about choosing the right XDR strategy! There's a lot to unpack here. Are EDR, MDR and XDR related? Can you get them all from one vendor - and  should  you? Do you run them on-prem, in the cloud, or both? Join us as Matt answers these questions and more!

Today we're talking about how you can use  PatchMyPc  to keep your home PC and/or pentest dropbox automatically updated with the latest/greatest patches!