7 Minute Security

Hey friends! After last week's heavy episode about my wife's health scare in Punta Cana, today's is a lighter one. (Quick update: she's doing better – still recovering, but appetite's back and she's got some pep again. Thanks so much to everyone who sent kind messages.) Today I'm gushing about how AI has been making my IT and security life way more efficient: Firewall migration : Had AI walk me th...

Hello friends! Today's episode is a bit of a detour from our usual content — it's part vacation horror story, part security/privacy confession. My wife got seriously ill during our spring break trip to Punta Cana, and in the chaos of navigating a foreign hospital at 2 a.m. with zero sleep and a pile of Spanish medical documents, I threw every privacy best practice I've ever preached straight into...

Today is my favorite pentest pwnage tale of 2026 – and maybe ever!  It centers around an ADCS abuse via an attack path I'd never seen before.  Tips include: Use Netexec to pull  Powershell history Trying to steal reg hives and the EDR is made?  Try copying them out to \\some-other-server.domain.com\share This post  featured interesting use of the Responder  -N option

Hola friends!  Today's another fun tale of pentest pwnage.  This time we started with  no  credentials and then set off on the bumpy journey from no-cred zero to domain admin hero!  One specific reference in today's podcast that may be helpful to you is  setting up ntlmrelayx to listen on port 3128 .

Hello friends!  We're back with a fun tale of internal network pentest pwnage.  This one highlights how AI can be used (with some guardrails!) to automate the boring stuff – and even help you pick part DLLs to find gold nuggets! P.S. – I do recommend you check out our last three episodes that are all about securing your community, and please check out  this Rolling Stone article which will give yo...

Hello friends, in today's edition of How to Secure Your Community, I give a brief recap of  part 1  and  part 2 , and then dive into some cool phone shortcuts you can setup so that with a single tap, you can alert friends/family that you're having an encounter with law enforcement and may need an assist.  Here's the things/links discussed: This great  Rolling Stone article  which features intervie...

Hello friends.  Today's episode piggybacks off of  last week 's discussion of Operation Metro Surge and how it has affected the state of Minnesota.  I also  highly  encourage you to read this  Rolling Stone article  which features interviews and first-hand stories of ICE encounters.  And for those of you asking for a good org to support here in Minnesota, please support  Haven Watch .  They give r...

Hello friends, it's good to be back with you.  I took a podcast hiatus in January to focus on helping communities affected by  Operation Metro Surge .  Today I share how my family and community has been affected by it.  And then in future episodes of this series, I'll get more into some technical nuts and bolts on how to be a more secure community helper – such as tightening up security settings o...

Hi friends, I'm going to be taking a break from producing podcast episodes, as well as content over at  7MinSec.club .  It's a  temporary  break, so please don't unsubscribe, unfollow, etc.  I need some extra time/energy to invest in helping our friends/family/neighbors/communities in the Twin Cities. Important note: our professional services are  not  impacted by this.  If you have security proje...

Hey friends, in episode #649 I gave you my  first impressions of Twingate .  It's been a minute, so I thought I'd revisit Twingate (specifically this awesome  Twingate LXC ) and talk about how we're using it to (almost) entirely replace remote access to our datacenter servers and pentest dropboxes.  Also, don't forget: Our pentest class is coming up at the end of the month – more info  here . We d...

After sharing a recent  story about how a phishing campaign went south , I heard feedback from a  lot  of you.  You either commiserated with my story, told me I wussed out, and/or had a difficult story of your own to share.  So I thought I'd keep this momentum up and share  another story of fail with you – this time about a Web app pentest that went south.

Today we're thrilled to announce the launch of LPLITE:GOAD (Light Pentest Live Interactive Training Experience: Game of Active Directory). The first class is coming up Tuesday, January 27 – Thursday, January 29 (9:00 a.m. – 1:00 p.m. CST each day). More information, pricing information and more can be found at  training.7minsec.com .  Today I talk about who should sign up for the course, what you...

I'm so excited to share today's tale of pentest pwnage, because it brings back to life a coercion technique I thought wouldn't work against Windows 11! Spoiler alert: check out  rpc2efs , as well as the  7MinSec Club episode  we did on the topic this week. Also, our January Light Pentest LITE:GOAD class is open for registration  here !

This might be obvious, but security is not all domain admin dancing and maximum pwnage. Sometimes, despite my best efforts, a security project does a faceplant. Today's episode focuses on a phishing campaign that had plenty of "bites" but got immediately shut down – for reasons I still don't understand.

Hola friends!  My week has very much been about trying to turnaround pentest dropboxes as quickly as possible.  In that adventure, I came across two time-saving discoveries: Using a  Proxmox LXC  as a persistent remote access method Writing a Proxmox post-deployment script that installs Splashtop on the Windows VM, and resets the admin passwords on both VMs, all from the Proxmox SSH console withou...

Happy Thanksgiving week friends! Today we're celebrating a turkey and pie overload by sharing another fun tale of pentest pwnage! It involves using  pygpoabuse  to hijack a GPO and turn it into our pentesting puppet!  Muahahahahaah!!!!  Also: This week over at  7MinSec.club  we looked at how to  defend  against some common SQL attacks We're  very  close to offering our brand new LPLITE:GOAD 3-day...

Hello friends, in today's episode I give an audio summary of a talk I gave this week at the MN GOVIT Symposium called "Should You Hire AI to Run Your Next Pentest?"  It's not a  pro- AI celebration, nor is it an  anti- AI bashing.  Rather, the talk focuses on my experiences using both free and paid AI services to guide me through an Active Directory penetration test.

Hello friends!  This week I'm talking about what I'm working on this week, including: Preparing a talk called  Should You Hire AI to Run Your Next Pentest  for the  Minnesota GOVIT Symposium . Playing with  Lithnet AD password protection  (I will show this live on next week's  Tuesday TOOLSday ). The Light Pentest logo contest has a winner!

Today is episode 700 of the 7MinSec podcast! Oh my gosh. My mom didn't think we could do it, but we did. Instead of a big blowout with huge news, giveaways and special guests, today is a pretty standard issue episode with a (nearly) 7-minute run time! The topic of today's episode is Pretender (which you can download  here  and read a lot more about  here ).  The tool authors explain the motivation...

Today we discuss some pre-travel tips you can use before hopping on a plane to start a work/personal adventure. Tips include: Updating the family DR/BCP plan Lightening your purse/wallet Validating/testing backups and restores Ensuring your auto coverage is up to snuff

Today I give a quick review of the cloud version of  ProjectDiscovery (not a sponsor!).

Today your pal and mine Joe "The Machine" Skeen pwn one of the two  Ninja Hacker Academy  domains!  This pwnage included: Swiping service tickets in the name of high-priv users Dumping secrets from wmorkstations Disabling AV Extracting hashes of gMSA accounts We didn't get the second domain pwned, and so I was originally thinking about doing a part 5 in November, but changed my mind.  Going forwar...

In today's episode: I got a new  podcast doodad I really like  JitBit  as a security ticketing system (not a sponsor) The  Threat Hunting with Velociraptor  2-day training was great.   Highly  recommend.  I got inspired to take this class after watching the 1-hour primer  here .

Today's tale of pentest pwnage involves: Using  mssqlkaren  to dump sensitive goodies out of SCCM Using a specific fork of  bloodhound  to find machines I could force password resets on (warning: don't do this in prod…read  this !) Don't forget to check out our weekly Tuesday TOOLSday – live every Tuesday at 10 a.m. over at  7MinSec.club !

Hey friends, today I talk about how fun it was two combine two cool pentest tactics, put them in a blender, and move from local admin to mid-tier system admin access (with full control over hundreds of systems)! The  Tuesday TOOLSday video we did over at 7minsec.club will help bring this to life as well.