7MS #656: How To Succeed In Business Without Really Crying

#Security #Software Development #Tech News #Information Security #Brian Johnson #Tech #News

30:55

A secret field that summons lightning. A massive spiral that disappears into a salt lake. A celestial observatory carved into a volcano. Meet the wild—and sometimes explosive—world of land art, where artists craft masterpieces with dynamite and bulldozers. In our Season 2 premiere, guest Dylan Thuras, cofounder of Atlas Obscura, takes us off road and into the minds of the artists who literally reshaped parts of the Southwest. These works aren’t meant to be easy to reach—or to explain—but they just might change how you see the world. Land art you’ll visit in this episode: - Double Negative and City by Michael Heizer (Garden Valley, Nevada) - Spiral Jetty by Robert Smithson (Great Salt Lake, Utah) - Sun Tunnels by Nancy Holt (Great Basin Desert, Utah) - Lightning Field by Walter De Maria (Catron County, New Mexico) - Roden Crater by James Turrell (Painted Desert, Arizona) Via Podcast is a production of AAA Mountain West Group.…

7 Minute Security « »
7MS #656: How to Succeed in Business Without Really Crying - Part 21

about a year ago 45:01

MP3•Episode home

Happy new year friends! Today we talk about business/personal resolutions, including:

New year’s resolution on the 7MinSec biz side to have a better work/life balance
New training offering in the works
Considering Substack as a communications platform
A mental health booster that I came across mostly by accident

674 episodes

7MS #656: How to Succeed in Business Without Really Crying - Part 21

7 Minute Security

232 subscribers

published about a year ago

MP3•Episode home

Happy new year friends! Today we talk about business/personal resolutions, including:

New year’s resolution on the 7MinSec biz side to have a better work/life balance
New training offering in the works
Considering Substack as a communications platform
A mental health booster that I came across mostly by accident

674 episodes

#Security #Software Development #Tech News #Information Security #Brian Johnson #Tech #News

All episodes

7 Minute Security

1
7MS #675: Pentesting GOAD – Part 2 31:41

5 days ago31:41

31:41

Hey friends! Today Joe “The Machine” Skeen and I tackled GOAD (Game of Active Directory) again – this time covering: SQL link abuse between two domains Forging inter-realm TGTs to conquer the coveted sevenkingdoms.local! Join us next month when we aim to overtake essos.local, which will make us rulers over all realms!…

7 Minute Security

1
7MS #674: Tales of Pentest Pwnage – Part 71 49:00

12 days ago49:00

49:00

Today’s tale of pentest pwnage is another great one! We talk about: The SPNless RBCD attack (covered in more detail in this episode ) Importance of looking at all “branches” of outbound permissions that your user has in BloodHound This devilishly effective MSOL-account-stealing PowerShell script (obfuscate it first!) A personal update on my frustration with ringing in my ears…

7 Minute Security

1
7MS #673: ProxmoxRox 30:31

18 days ago30:31

30:31

Today we’re excited to release ProxmoxRox – a repo of info and scripts to help you quickly spin up Ubuntu and Windows VMs. Also, some important news items: 7MinSec.club in-person meeting is happening Wednesday, May 14! More details here . We did our second Tuesday TOOLSday this week and showed you some local privesc techniques when you have local admin on an endpoint…

7 Minute Security

1
7MS #672: Tales of Pentest Pwnage – Part 70 55:07

26 days ago55:07

55:07

Today’s a fun tale of pentest pwnage where we leveraged a WinRM service ticket in combination with the shadow credentials attack, then connected to an important system using evil-winrm and make our getaway with some privileged Kerberos TGTs! I also share an (intentionally) vague story about a personal struggle I could use your thoughts/prayers/vibes with.…

7 Minute Security

1
7MS #671: Pentesting GOAD 25:18

5 weeks ago25:18

25:18

Hello! This week Joe “The Machine” Skeen and I kicked off a series all about pentesting GOAD (Game of Active Directory) . In part one we covered: Checking for null session enumeration on domain controllers Enumerating systems with and without SMB signing Scraping AD user account descriptions Capturing hashes using Responder Cracking hashes with Hashcat…

7 Minute Security

1
7MS #670: Adventures in Self-Hosting Security Services 36:48

6 weeks ago36:48

36:48

Hi friends, today I’m kicking off a series talking about the good/bad/ugly of hosting security services. Today I talk specifically about transfer.zip . By self-hosting your own instance of transfer.zip, you can send and receive HUGE files that are end-to-end encrypted using WebRTC. Sweet! I also supplemented today’s episode with a short live video over at 7MinSec.club .…

7 Minute Security

1
7MS #669: What I’m Working on This Week – Part 3 42:37

7 weeks ago42:37

42:37

Hi friends, in this edition of what I’m working on this week: 3 pulse-pounding pentests that had…problems Something I’m calling the unshadow/reshadow credentials attack Heads-up on a new video experiment I’m going to try next week

7 Minute Security

1
7MS #668: Tales of Pentest Pwnage – Part 69 30:22

8 weeks ago30:22

30:22

Hola friends! Today’s tale of pentest pwnage talks about abusing Exchange and the Azure ADSync account! Links to the discussed things: adconnectdump – for all your ADSync account dumping needs! Adam Chester PowerShell script to dump MSOL service account dacledit.py (part of Impacket) to give myself full write privileges on the MSOL sync account: dacledit.py -action ‘write’ -rights ‘FullControl’ -principal lowpriv -target MSOL-SYNC-ACCOUNT -dc-ip 1.2.3.4 domain.com/EXCHANGEBOX$ -k -no-pass Looking to tighten up your Exchange permissions – check out this crazy detailed post…

7 Minute Security

1
7MS #667: Pentesting GOAD SCCM - Part 2! 28:52

9 weeks ago28:52

28:52

Hey friends, our good buddy Joe “The Machine” Skeen and I are back this week with part 2 (check out part 1 !) tackling GOAD SCCM again! Spoiler alert: this time we get DA! YAY! Definitely check out these handy SCCM resources to help you – whether it be in the lab or IRL (in real life): GOAD SCCM walkthrough MisconfigurationManager – tremendous resource for enumerating/attacking/privesc-ing within SCCM This gist from Adam Chester will help you decrypt SCCM creds stored in SQL…

7 Minute Security

1
7MS #666: Tales of Pentest Pwnage – Part 68 45:35

10 weeks ago45:35

45:35

Today we have a smattering of miscellaneous pentest tips to help you pwn all the stuff! Selective Snaffling with Snaffler The importance of having plenty of dropbox disk space – for redundant remote connectivity and PXE abuse! TGTs can be fun for SMB riffling, targeted Snaffling, netexec-ing and Evil-WinRM ing!…

7 Minute Security

1
7MS #665: What I'm Working on This Week - Part 2 28:49

11 weeks ago28:49

28:49

Hello there friends, I’m doing another “what I’m working on this week” episode which includes: BPATTY v1.6 release – big/cool/new content to share here PWPUSH – this looks to be an awesome way (both paid and free) to securely share files and passwords

7 Minute Security

1
7MS #664: What I’m Working on This Week 25:38

12 weeks ago25:38

25:38

In today’s episode I talk about what I’m working on this week, including: Playing with Sliver C2 and pairing it with ShellcodePack Talking about Netexecer, my upcoming tool that helps automate some of the early/boring stuff in an internal pentest A gotcha to watch out for if utilizing netexec’s MSSQL upload/download functionality…

7 Minute Security

1
7MS #663: Pentesting GOAD SCCM 29:41

13 weeks ago29:41

29:41

Today we live-hack an SCCM server via GOAD SCCM using some attack guidance from Misconfiguration Manager ! Attacks include: Unauthenticated PXE attack PXE (with password) attack Relaying the machine account of the MECM box over to the SQL server to get local admin

7 Minute Security

1
7MS #662: Pentesting Potatoes - Part 2 37:39

14 weeks ago37:39

37:39

Hi friends, today we're talking about pentesting potatoes (not really, but this episode is sort of a homage to episode 333 where I went to Boise to do a controls assessment and ended up doing an impromptu physical pentest and social engineer exercise). I talk about what a blast I'm having hunting APTs in XINTRA LABS , and two cool tools I'm building with the help of Cursor : A wrapper for Netexec that quickly finds roastable users, machines without SMB signing, clients running Webclient and more. A sifter of Snaffler -captured files to zero in even closer on interesting things such as usernames and passwords in clear text.…

7 Minute Security

1
7MS #661: Baby’s First Hetzner and Ludus – Part 2 37:53

15 weeks ago37:53