エピソード

  • 7MS #684: Pwning Ninja Hacker Academy
    2025/07/18

    Hey friends, today we start pwning Ninja Hacker Academy – cool CTF-style lab that has you start with no cred and try to conquer domain admin on two domains!

    続きを読む 一部表示
    23 分
  • 7MS #683: What I'm Working on This Week - Part 4
    2025/07/12

    This week I’m working on a mixed bag of fun security and marketing things:

    • A pentest I’m stuck on
    • My latest lab CTF obsession: Ninja Hacker Academy
    • A cool “about 7MinSec” marketing video that was recorded in a pro studio!
    続きを読む 一部表示
    31 分
  • 7MS #682: Securing Your Family During and After a Disaster – Part 7
    2025/07/04

    Today’s episode is a downer! We talk about things you might want to have buttoned up for when you are eventually not alive anymore:

    • Living will
    • Buried vs. cremated?
    • Funeral plans
    • Funeral PHOTOS?

    I also talk about how my dad broke his ribs while trying to break a chimpmunk, and how a freak 4-wheeler accident also had my ribs in agony.

    続きを読む 一部表示
    31 分
  • 7MS #681: Pentesting GOAD – Part 3
    2025/06/27

    Today Joe “The Machine” Skeen and I pwn the third and final realm in the world of GOAD (Game of Active Directory): essos.local! The way we go about it is to do a WinRM connection to our previously-pwned Kingslanding domain, coerce authentication out of MEEREEN (the DC for essos.local) and then capture/abuse the TGT with Rubeus! Enjoy.

    続きを読む 一部表示
    18 分
  • 7MS #680: Tips for a Better Purple Team Experience
    2025/06/20

    Today I share some tips on creating a better purple team experience for your customers, including:

    • Setting up communication channels and cadence
    • Giving a heads-up on highs/criticals during testing (not waiting until report time)
    • Where appropriate, record videos of attacks to give them more context
    続きを読む 一部表示
    27 分
  • 7MS #679: Tales of Pentest Pwnage – Part 73
    2025/06/13

    In today’s tale of pentest pwnage I talk about a cool ADCS ESC3 attack – which I also did live on this week’s Tuesday TOOLSday. I also talk about Exegol’s licensing plans (and how it might break your pentest deployments if you use ProxmoxRox).

    続きを読む 一部表示
    30 分
  • 7MS #678: How to Succeed in Business Without Really Crying – Part 22
    2025/06/06

    Today I share some tips on presenting a wide variety of content to a wide variety of audiences, including:

    • Knowing your audience before you touch PowerPoint
    • Understanding your presentation physical hookups and presentation surfaces
    • A different way to screen-share via Teams that makes resolution/smoothness way better!
    続きを読む 一部表示
    34 分
  • 7MS #677: That One Time I Was a Victim of a Supply Chain Attack
    2025/05/30

    Hi everybody. Today I take it easy (because my brain is friend from the short week) to tell you about the time I think my HP laptop was compromised at the factory!

    続きを読む 一部表示
    14 分