7 Minute Security podcast

Artwork

Player FM - Internet Radio Done Right

추가했습니다 forty-two 주 전

Brian Johnson에서 제공하는 콘텐츠입니다. 에피소드, 그래픽, 팟캐스트 설명을 포함한 모든 팟캐스트 콘텐츠는 Brian Johnson 또는 해당 팟캐스트 플랫폼 파트너가 직접 업로드하고 제공합니다. 누군가가 귀하의 허락 없이 귀하의 저작물을 사용하고 있다고 생각되는 경우 여기에 설명된 절차를 따르실 수 있습니다 https://ko.player.fm/legal.

S

Squid Game: The Official Podcast

Squid Game: The Official Podcast podcast artwork

Squid Game: The Official Podcast podcast artwork

1
Keys and Knives - S3 Ep 1 26:28

21일 전26:28

나중에 재생

나중에 재생

26:28

Squid Game is back—and this time, the knives are out. In the thrilling Season 3 premiere, Player 456 is spiraling and a brutal round of hide-and-seek forces players to kill or be killed. Hosts Phil Yu and Kiera Please break down Gi-hun’s descent into vengeance, Guard 011’s daring betrayal of the Game, and the shocking moment players are forced to choose between murdering their friends… or dying. Then, Carlos Juico and Gavin Ruta from the Jumpers Jump podcast join us to unpack their wild theories for the season. Plus, Phil and Kiera face off in a high-stakes round of “Hot Sweet Potato.” SPOILER ALERT! Make sure you watch Squid Game Season 3 Episode 1 before listening on. Play one last time. IG - @SquidGameNetflix X (f.k.a. Twitter) - @SquidGame Check out more from Phil Yu @angryasianman , Kiera Please @kieraplease and the Jumpers Jump podcast Listen to more from Netflix Podcasts . Squid Game: The Official Podcast is produced by Netflix and The Mash-Up Americans.…

7 Minute Security

공유

시리즈 홈•Feed

Brian Johnson에서 제공하는 콘텐츠입니다. 에피소드, 그래픽, 팟캐스트 설명을 포함한 모든 팟캐스트 콘텐츠는 Brian Johnson 또는 해당 팟캐스트 플랫폼 파트너가 직접 업로드하고 제공합니다. 누군가가 귀하의 허락 없이 귀하의 저작물을 사용하고 있다고 생각되는 경우 여기에 설명된 절차를 따르실 수 있습니다 https://ko.player.fm/legal.

7 Minute Security is a weekly information security podcast focusing on penetration testing, blue teaming and building a career in security. The podcast also features in-depth interviews with industry leaders who share their insights, tools, tips and tricks for being a successful security engineer.

… continue reading

682 에피소드

Artwork

7 Minute Security

updated 5일 전

공유

시리즈 홈•Feed

Brian Johnson에서 제공하는 콘텐츠입니다. 에피소드, 그래픽, 팟캐스트 설명을 포함한 모든 팟캐스트 콘텐츠는 Brian Johnson 또는 해당 팟캐스트 플랫폼 파트너가 직접 업로드하고 제공합니다. 누군가가 귀하의 허락 없이 귀하의 저작물을 사용하고 있다고 생각되는 경우 여기에 설명된 절차를 따르실 수 있습니다 https://ko.player.fm/legal.

7 Minute Security is a weekly information security podcast focusing on penetration testing, blue teaming and building a career in security. The podcast also features in-depth interviews with industry leaders who share their insights, tools, tips and tricks for being a successful security engineer.

… continue reading

682 에피소드

모든 에피소드

×

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #683: What I'm Working on This Week - Part 4 30:50

5일 전30:50

나중에 재생

나중에 재생

30:50

This week I’m working on a mixed bag of fun security and marketing things: A pentest I’m stuck on My latest lab CTF obsession: Ninja Hacker Academy A cool “about 7MinSec” marketing video that was recorded in a pro studio!

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #682: Securing Your Family During and After a Disaster – Part 7 30:59

13일 전30:59

나중에 재생

나중에 재생

30:59

Today’s episode is a downer! We talk about things you might want to have buttoned up for when you are eventually not alive anymore: Living will Buried vs. cremated? Funeral plans Funeral PHOTOS? I also talk about how my dad broke his ribs while trying to break a chimpmunk, and how a freak 4-wheeler accident also had my ribs in agony.…

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #681: Pentesting GOAD – Part 3 18:18

20일 전18:18

나중에 재생

나중에 재생

18:18

Today Joe “The Machine” Skeen and I pwn the third and final realm in the world of GOAD (Game of Active Directory) : essos.local! The way we go about it is to do a WinRM connection to our previously-pwned Kingslanding domain, coerce authentication out of MEEREEN (the DC for essos.local) and then capture/abuse the TGT with Rubeus! Enjoy.…

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #680: Tips for a Better Purple Team Experience 26:48

27일 전26:48

나중에 재생

나중에 재생

26:48

Today I share some tips on creating a better purple team experience for your customers, including: Setting up communication channels and cadence Giving a heads-up on highs/criticals during testing (not waiting until report time) Where appropriate, record videos of attacks to give them more context

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #679: Tales of Pentest Pwnage – Part 73 30:12

5 weeks 전30:12

나중에 재생

나중에 재생

30:12

In today’s tale of pentest pwnage I talk about a cool ADCS ESC3 attack – which I also did live on this week’s Tuesday TOOLSday. I also talk about Exegol’s licensing plans (and how it might break your pentest deployments if you use ProxmoxRox ).

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #678: How to Succeed in Business Without Really Crying – Part 22 33:39

6 weeks 전33:39

나중에 재생

나중에 재생

33:39

Today I share some tips on presenting a wide variety of content to a wide variety of audiences, including: Knowing your audience before you touch PowerPoint Understanding your presentation physical hookups and presentation surfaces A different way to screen-share via Teams that makes resolution/smoothness way better!…

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #677: That One Time I Was a Victim of a Supply Chain Attack 13:48

7 weeks 전13:48

나중에 재생

나중에 재생

13:48

Hi everybody. Today I take it easy (because my brain is friend from the short week) to tell you about the time I think my HP laptop was compromised at the factory!

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #676: Tales of Pentest Pwnage – Part 72 59:34

7 weeks 전59:34

나중에 재생

나중에 재생

59:34

Today’s fun tale of pentest pwnage discuss an attack path that would, in my opinion, probably be impossible to detect…until it’s too late.

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #675: Pentesting GOAD – Part 2 31:41

9 weeks 전31:41

나중에 재생

나중에 재생

31:41

Hey friends! Today Joe “The Machine” Skeen and I tackled GOAD (Game of Active Directory) again – this time covering: SQL link abuse between two domains Forging inter-realm TGTs to conquer the coveted sevenkingdoms.local! Join us next month when we aim to overtake essos.local, which will make us rulers over all realms!…

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #674: Tales of Pentest Pwnage – Part 71 49:00

10 weeks 전49:00

나중에 재생

나중에 재생

49:00

Today’s tale of pentest pwnage is another great one! We talk about: The SPNless RBCD attack (covered in more detail in this episode ) Importance of looking at all “branches” of outbound permissions that your user has in BloodHound This devilishly effective MSOL-account-stealing PowerShell script (obfuscate it first!) A personal update on my frustration with ringing in my ears…

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #673: ProxmoxRox 30:31

11 weeks 전30:31

나중에 재생

나중에 재생

30:31

Today we’re excited to release ProxmoxRox – a repo of info and scripts to help you quickly spin up Ubuntu and Windows VMs. Also, some important news items: 7MinSec.club in-person meeting is happening Wednesday, May 14! More details here . We did our second Tuesday TOOLSday this week and showed you some local privesc techniques when you have local admin on an endpoint…

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #672: Tales of Pentest Pwnage – Part 70 55:07

12 weeks 전55:07

나중에 재생

나중에 재생

55:07

Today’s a fun tale of pentest pwnage where we leveraged a WinRM service ticket in combination with the shadow credentials attack, then connected to an important system using evil-winrm and make our getaway with some privileged Kerberos TGTs! I also share an (intentionally) vague story about a personal struggle I could use your thoughts/prayers/vibes with.…

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #671: Pentesting GOAD 25:18

13 weeks 전25:18

나중에 재생

나중에 재생

25:18

Hello! This week Joe “The Machine” Skeen and I kicked off a series all about pentesting GOAD (Game of Active Directory) . In part one we covered: Checking for null session enumeration on domain controllers Enumerating systems with and without SMB signing Scraping AD user account descriptions Capturing hashes using Responder Cracking hashes with Hashcat…

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #670: Adventures in Self-Hosting Security Services 36:48

14 weeks 전36:48

나중에 재생

나중에 재생

36:48

Hi friends, today I’m kicking off a series talking about the good/bad/ugly of hosting security services. Today I talk specifically about transfer.zip . By self-hosting your own instance of transfer.zip, you can send and receive HUGE files that are end-to-end encrypted using WebRTC. Sweet! I also supplemented today’s episode with a short live video over at 7MinSec.club .…

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #669: What I’m Working on This Week – Part 3 42:37

15 weeks 전42:37

나중에 재생

나중에 재생

42:37

Hi friends, in this edition of what I’m working on this week: 3 pulse-pounding pentests that had…problems Something I’m calling the unshadow/reshadow credentials attack Heads-up on a new video experiment I’m going to try next week

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #668: Tales of Pentest Pwnage – Part 69 30:22

16 weeks 전30:22

나중에 재생

나중에 재생

30:22

Hola friends! Today’s tale of pentest pwnage talks about abusing Exchange and the Azure ADSync account! Links to the discussed things: adconnectdump – for all your ADSync account dumping needs! Adam Chester PowerShell script to dump MSOL service account dacledit.py (part of Impacket) to give myself full write privileges on the MSOL sync account: dacledit.py -action ‘write’ -rights ‘FullControl’ -principal lowpriv -target MSOL-SYNC-ACCOUNT -dc-ip 1.2.3.4 domain.com/EXCHANGEBOX$ -k -no-pass Looking to tighten up your Exchange permissions – check out this crazy detailed post…

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #667: Pentesting GOAD SCCM - Part 2! 28:52

17 weeks 전28:52

나중에 재생

나중에 재생

28:52

Hey friends, our good buddy Joe “The Machine” Skeen and I are back this week with part 2 (check out part 1 !) tackling GOAD SCCM again! Spoiler alert: this time we get DA! YAY! Definitely check out these handy SCCM resources to help you – whether it be in the lab or IRL (in real life): GOAD SCCM walkthrough MisconfigurationManager – tremendous resource for enumerating/attacking/privesc-ing within SCCM This gist from Adam Chester will help you decrypt SCCM creds stored in SQL…

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #666: Tales of Pentest Pwnage – Part 68 45:35

18 weeks 전45:35

나중에 재생

나중에 재생

45:35

Today we have a smattering of miscellaneous pentest tips to help you pwn all the stuff! Selective Snaffling with Snaffler The importance of having plenty of dropbox disk space – for redundant remote connectivity and PXE abuse! TGTs can be fun for SMB riffling, targeted Snaffling, netexec-ing and Evil-WinRM ing!…

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #665: What I'm Working on This Week - Part 2 28:49

19 weeks 전28:49

나중에 재생

나중에 재생

28:49

Hello there friends, I’m doing another “what I’m working on this week” episode which includes: BPATTY v1.6 release – big/cool/new content to share here PWPUSH – this looks to be an awesome way (both paid and free) to securely share files and passwords

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #664: What I’m Working on This Week 25:38

20 weeks 전25:38

나중에 재생

나중에 재생

25:38

In today’s episode I talk about what I’m working on this week, including: Playing with Sliver C2 and pairing it with ShellcodePack Talking about Netexecer, my upcoming tool that helps automate some of the early/boring stuff in an internal pentest A gotcha to watch out for if utilizing netexec’s MSSQL upload/download functionality…

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #663: Pentesting GOAD SCCM 29:41

21 weeks 전29:41

나중에 재생

나중에 재생

29:41

Today we live-hack an SCCM server via GOAD SCCM using some attack guidance from Misconfiguration Manager ! Attacks include: Unauthenticated PXE attack PXE (with password) attack Relaying the machine account of the MECM box over to the SQL server to get local admin

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #662: Pentesting Potatoes - Part 2 37:39

22 weeks 전37:39

나중에 재생

나중에 재생

37:39

Hi friends, today we're talking about pentesting potatoes (not really, but this episode is sort of a homage to episode 333 where I went to Boise to do a controls assessment and ended up doing an impromptu physical pentest and social engineer exercise). I talk about what a blast I'm having hunting APTs in XINTRA LABS , and two cool tools I'm building with the help of Cursor : A wrapper for Netexec that quickly finds roastable users, machines without SMB signing, clients running Webclient and more. A sifter of Snaffler -captured files to zero in even closer on interesting things such as usernames and passwords in clear text.…

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #661: Baby’s First Hetzner and Ludus – Part 2 37:53

23 weeks 전37:53

나중에 재생

나중에 재생

37:53

Today we continue our journey from last week where we spun up a Hetzner cloud server and Ludus.cloud SCCM pentesting range! Topics include: Building a Proxmox Backup Server (this YouTube video was super helpful) Bridging a second WAN IP to the Hetzner/Ludus server Wrestling with the Hetzner (10-rule limit!) software firewall When attacking SCCM – you can get a version of pxethief that runs in Linux !…

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #660: Baby's First Hetzner and Ludus 34:34

24 weeks 전34:34

나중에 재생

나중에 재생

34:34

I had an absolute ball this week spinning up my first Hetzner server, though it was not without some drama (firewall config frustrations and failing hard drives). Once I got past that , though, I got my first taste of the amazing world of Ludus.cloud , where I spun up a vulnerable Microsoft SCCM lab and have started to pwn it. Can’t say enough good things about Ludus.cloud, but I certainly tried in this episode!…

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #659: Eating the Security Dog Food - Part 8 28:29

25 weeks 전28:29

나중에 재생

나중에 재생

28:29

Today I’m excited about some tools/automation I’ve been working on to help shore up the 7MinSec security program, including: Using Retype as a document repository Leveraging the Nessus API to automate the downloading/correlating of scan data Monitoring markdown files for “last update” changes using a basic Python script…

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #658: WPA3 Downgrade Attacks 32:58

26 weeks 전32:58

나중에 재생

나중에 재생

32:58

Hey friends, today we cover: The shiny new 7MinSec Club BPATTY updates A talk-through of the WPA3 downgrade attack, complemented by the YouTube livestream

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #657: Writing Rad Security Documentation with Retype 20:36

27 weeks 전20:36

나중에 재생

나중에 재생

20:36

Hello friends! Today we’re talking about a neat and quick-to-setup documentation service called Retype . In a nutshell, you can get Retype installed on GitHub pages in about 5 minutes and be writing beautiful markdown pages (with built-in search) immediately. I still absolutely love Docusaurus , but I think Retype definitely gives it a run for its money.…

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #656: How to Succeed in Business Without Really Crying - Part 21 45:01

28 weeks 전45:01

나중에 재생

나중에 재생

45:01

Happy new year friends! Today we talk about business/personal resolutions, including: New year’s resolution on the 7MinSec biz side to have a better work/life balance New training offering in the works Considering Substack as a communications platform A mental health booster that I came across mostly by accident…

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #655: Happy Hacking Holidays 58:08

29 weeks 전58:08

나중에 재생

나중에 재생

58:08

Today we’re doing a milkshake of several topics: wireless pentest pwnage, automating the boring pentest stuff with cursor.ai , and some closing business thoughts at 7MinSec celebrates its 7th year as a security consultancy. Links discussed today: AWUS036ACH wifi card (not my favorite anymore) Panda PAU09 N600 (love this one!) The very important Github issue that helped me better understand BPFs and WPA3 attacks TrustedSec article on WPA3 downgrade attacks…

7

7 Minute Security

7 Minute Security podcast artwork

1
7MS #654: Tales of Pentest Pwnage – Part 67 41:50

31 weeks 전41:50

나중에 재생

나중에 재생

41:50

Today we’ve got some super cool stuff to cover today! First up, BPATTY v1.4 is out and has a slug of cool things: A whole new section on old-school wifi tools like airmon-ng, aireplay-ng and airodump-ng Syntax on using two different tools to parse creds from Dehashed An updated tutorial on using Gophish for phishing campaigns The cocoa-flavored cherry on top is a tale of pentest pwnage that includes: Abusing SCCM Finding gold in SQL configuration/security audits…

플레이어 FM에 오신것을 환영합니다!

플레이어 FM은 웹에서 고품질 팟캐스트를 검색하여 지금 바로 즐길 수 있도록 합니다. 최고의 팟캐스트 앱이며 Android, iPhone 및 웹에서도 작동합니다. 장치 간 구독 동기화를 위해 가입하세요.

500개 이상의 주제를 청취

탐색하는 동안 이 프로그램을 들어보세요.