7MS #635: Eating the Security Dog Food - Part 7
Today we're talking about eating the security dog food – specifically: Satisfying critical security control #1 Using the Atlassian family of tools to create a ticketing/change control system and wrap...
3 Aug 202445min
7MS #634: Tales of Pentest Pwnage - Part 60
Hi, today's tale of pentest pwnage covers a few wins and one loss: A cool opportunity to drop Farmer "crops" to a domain admin's desktop folder via PowerShell remote session Finding super sensitive d...
26 Jul 202432min
7MS #633: How to Create a Security Knowledgebase with Docusaurus
Hey friends, we're doing a little departure from our normal topics and focusing on how to create a security knowledgebase (is that one word or two?) using Docusaurus! It's cool, it's free, it's from ...
19 Jul 202414min
7MS #632: Tales of Pentest Pwnage – Part 59
Today's tale of pentest pwnage includes some fun stuff, including: SharpGPOAbuse helps abuse vulnerable GPOs! Try submitting a harmless POC first via a scheduled task – like ping -n 1 your.kali.ip...
12 Jul 202448min
7MS #631: Tales of Pentest Pwnage – Part 58
Hi friends, today's a tale full of test tips and tools to help you in your adventures in pentesting! SCCM Exploitation SCCM Exploitation: The First Cred Is the Deepest II w/ Gabriel Prud'homme – fant...
7 Jul 202415min
7MS #630: Epic Road Trip Served with Security Sprinkles
Today I recap a two week persona/biz road trip and talk about the security stuff that got sprinkled into it, including: Family members who don't care about their personal security Weakpass – a cool c...
1 Jul 202445min
7MS #629: Interview with Stu Musil of Ambient Consulting
Today we have a fun featured interview with my new friend Stu Musil of Ambient Consulting I had a great time talking with Stu about bashing come common misconceptions people have about working with re...
24 Jun 202446min
7MS #628: How to Succeed in Business Without Really Crying – Part 17
Hey friends, today we talk about some not-so-glamorous but ever-so-important stuff related to running a cybersecurity consultancy, including: Taking an inventory of all the SaaS stuff your business u...
14 Jun 20249min
