7MS #652: Securing Your Mental Health - Part 6

7 Minute Security

#Security #Software Development #Tech News #Information Security #Brian Johnson #Tech #News

30:14

"It is a scientific fact that these macaques, like all other primates, including humans, are communicating. They communicate in much the same way we do - facial expressions, vocalizations, body postures, those kinds of things." - Jeff Kerr Jeff Kerr is PETA foundations Chief Legal Officer. I asked him to come on the show to talk about one of PETA’s current lawsuits against the National Institutes of Health (NIH) and Nathional Institute of Mental Health (NIMH). PETA is arguing that the monkeys being tested on in a government run facility are capable of communication (or “are communicating”). And that we have a constitutional right under the First Amendment to receive their communications. This could be a game changer in allowing us to see what’s really going on in labs that are funded by taxpayer money, and which have so far been censored from public view. PETA’s lawsuit follows years of NIH’s attempts to deny Freedom of Information requests banning PETA executives from its campus and illegally censoring animal advocates’ speech on NIH’s public social media pages. Through the lawsuit, PETA is seeking a live audio-visual feed to see and hear real-time communications from the macaques who have been kept isolated, used in fear experiments, and had posts cemented into their heads. Anthropologists and other scientists have studied macaque and other primate communications for decades and know that the monkeys communicate effectively and intentionally through lip smacking, fear grimaces, body language, and various cries and sounds—all of which constitute speech under the law. Primatologists can analyze that speech on a deeper level to share their stories with the world.…

about a year ago 41:52

MP3•Episode home

Today’s episode talks about some things that helped me get through a stressful and hospital-visit-filled Thanksgiving week, including:

Journaling
Meditation
(An activity I’m ashamed of but has actually done wonders for my mental health)

678 episodes

7MS #652: Securing Your Mental Health - Part 6

7 Minute Security

232 subscribers

published about a year ago

MP3•Episode home

Today’s episode talks about some things that helped me get through a stressful and hospital-visit-filled Thanksgiving week, including:

Journaling
Meditation
(An activity I’m ashamed of but has actually done wonders for my mental health)

678 episodes

#Security #Software Development #Tech News #Information Security #Brian Johnson #Tech #News

All episodes

7 Minute Security

1
7MS #679: Tales of Pentest Pwnage – Part 73 30:12

1 day ago30:12

30:12

In today’s tale of pentest pwnage I talk about a cool ADCS ESC3 attack – which I also did live on this week’s Tuesday TOOLSday. I also talk about Exegol’s licensing plans (and how it might break your pentest deployments if you use ProxmoxRox ).

7 Minute Security

1
7MS #678: How to Succeed in Business Without Really Crying – Part 22 33:39

9 days ago33:39

33:39

Today I share some tips on presenting a wide variety of content to a wide variety of audiences, including: Knowing your audience before you touch PowerPoint Understanding your presentation physical hookups and presentation surfaces A different way to screen-share via Teams that makes resolution/smoothness way better!…

7 Minute Security

1
7MS #677: That One Time I Was a Victim of a Supply Chain Attack 13:48

16 days ago13:48

13:48

Hi everybody. Today I take it easy (because my brain is friend from the short week) to tell you about the time I think my HP laptop was compromised at the factory!

7 Minute Security

1
7MS #676: Tales of Pentest Pwnage – Part 72 59:34

19 days ago59:34

59:34

Today’s fun tale of pentest pwnage discuss an attack path that would, in my opinion, probably be impossible to detect…until it’s too late.

7 Minute Security

1
7MS #675: Pentesting GOAD – Part 2 31:41

30 days ago31:41

31:41

Hey friends! Today Joe “The Machine” Skeen and I tackled GOAD (Game of Active Directory) again – this time covering: SQL link abuse between two domains Forging inter-realm TGTs to conquer the coveted sevenkingdoms.local! Join us next month when we aim to overtake essos.local, which will make us rulers over all realms!…

7 Minute Security

1
7MS #674: Tales of Pentest Pwnage – Part 71 49:00

5 weeks ago49:00

49:00

Today’s tale of pentest pwnage is another great one! We talk about: The SPNless RBCD attack (covered in more detail in this episode ) Importance of looking at all “branches” of outbound permissions that your user has in BloodHound This devilishly effective MSOL-account-stealing PowerShell script (obfuscate it first!) A personal update on my frustration with ringing in my ears…

7 Minute Security

1
7MS #673: ProxmoxRox 30:31

6 weeks ago30:31

30:31

Today we’re excited to release ProxmoxRox – a repo of info and scripts to help you quickly spin up Ubuntu and Windows VMs. Also, some important news items: 7MinSec.club in-person meeting is happening Wednesday, May 14! More details here . We did our second Tuesday TOOLSday this week and showed you some local privesc techniques when you have local admin on an endpoint…

7 Minute Security

1
7MS #672: Tales of Pentest Pwnage – Part 70 55:07

7 weeks ago55:07

55:07

Today’s a fun tale of pentest pwnage where we leveraged a WinRM service ticket in combination with the shadow credentials attack, then connected to an important system using evil-winrm and make our getaway with some privileged Kerberos TGTs! I also share an (intentionally) vague story about a personal struggle I could use your thoughts/prayers/vibes with.…

7 Minute Security

1
7MS #671: Pentesting GOAD 25:18

8 weeks ago25:18

25:18

Hello! This week Joe “The Machine” Skeen and I kicked off a series all about pentesting GOAD (Game of Active Directory) . In part one we covered: Checking for null session enumeration on domain controllers Enumerating systems with and without SMB signing Scraping AD user account descriptions Capturing hashes using Responder Cracking hashes with Hashcat…

7 Minute Security

1
7MS #670: Adventures in Self-Hosting Security Services 36:48

9 weeks ago36:48

36:48

Hi friends, today I’m kicking off a series talking about the good/bad/ugly of hosting security services. Today I talk specifically about transfer.zip . By self-hosting your own instance of transfer.zip, you can send and receive HUGE files that are end-to-end encrypted using WebRTC. Sweet! I also supplemented today’s episode with a short live video over at 7MinSec.club .…

7 Minute Security

1
7MS #669: What I’m Working on This Week – Part 3 42:37

10 weeks ago42:37

42:37

Hi friends, in this edition of what I’m working on this week: 3 pulse-pounding pentests that had…problems Something I’m calling the unshadow/reshadow credentials attack Heads-up on a new video experiment I’m going to try next week

7 Minute Security

1
7MS #668: Tales of Pentest Pwnage – Part 69 30:22

11 weeks ago30:22

30:22

Hola friends! Today’s tale of pentest pwnage talks about abusing Exchange and the Azure ADSync account! Links to the discussed things: adconnectdump – for all your ADSync account dumping needs! Adam Chester PowerShell script to dump MSOL service account dacledit.py (part of Impacket) to give myself full write privileges on the MSOL sync account: dacledit.py -action ‘write’ -rights ‘FullControl’ -principal lowpriv -target MSOL-SYNC-ACCOUNT -dc-ip 1.2.3.4 domain.com/EXCHANGEBOX$ -k -no-pass Looking to tighten up your Exchange permissions – check out this crazy detailed post…

7 Minute Security

1
7MS #667: Pentesting GOAD SCCM - Part 2! 28:52

12 weeks ago28:52

28:52

Hey friends, our good buddy Joe “The Machine” Skeen and I are back this week with part 2 (check out part 1 !) tackling GOAD SCCM again! Spoiler alert: this time we get DA! YAY! Definitely check out these handy SCCM resources to help you – whether it be in the lab or IRL (in real life): GOAD SCCM walkthrough MisconfigurationManager – tremendous resource for enumerating/attacking/privesc-ing within SCCM This gist from Adam Chester will help you decrypt SCCM creds stored in SQL…

7 Minute Security

1
7MS #666: Tales of Pentest Pwnage – Part 68 45:35

13 weeks ago45:35

45:35

Today we have a smattering of miscellaneous pentest tips to help you pwn all the stuff! Selective Snaffling with Snaffler The importance of having plenty of dropbox disk space – for redundant remote connectivity and PXE abuse! TGTs can be fun for SMB riffling, targeted Snaffling, netexec-ing and Evil-WinRM ing!…

7 Minute Security

1
7MS #665: What I'm Working on This Week - Part 2 28:49

14 weeks ago28:49