Blog
Search all our posts or browse some of our most recent entries below:
7MS #406: Securing Your Family During and After a Disaster – Part 4
This episode of the 7MS podcast is brought to you by ITProTV. It’s never too late to start a new career in IT or move up the later, and ITProTV has you covered. From CompTIA and Cisco to ECCouncil and VMWare. Get a 7-day free trial and save 30% off all plans by going to itpro.tv/7MSFirst and foremost, I hope you all are doing well [...]
7MS #405: Tales of Internal Pentest Pwnage – Part 16
This podcast is sponsored by Arctic Wolf, whose Concierge Security teams Monitor, Detect and Respond to Cyber threats 24/7 for thousands of customers around the world. Arctic Wolf. Redefining cybersecurity. Visit Arcticwolf.com/7MS to learn more.Today's episode of pentest pwnage is the (hopefully) exciting conclusion to this episode. Last we left this pentest, we ran into some excellent blue team defenses, including:MFA on internal servers (which [...]
7MS #403: 7MOOMAMA – Juice Shop Song + Backdoors and Breaches Jingle
Today's slightly off-topic episode kicks off a new tag called 7MOOMAMA. That stands for 7 Minutes of Only Music and Miscellaneous Awesomeness.To kick things off, I'm super excited to share with you two new security-themed songs for some of my favorite security things! They are:Backdoors and Breaches - my favorite incident response card game!OWASP Juice Shop - my favorite vulnerable Web application!Enjoy!Backdoors and BreachesBackdoors and [...]
7MS #402: Interview with Matt Duench of Arctic Wolf
Today I'm joined by Matt Duench (LinkedIn / Twitter), who has a broad background in technology and security - from traveling to over 40 countries around the world working with telecom services, to his current role at Arctic Wolf where he leads product marketing for their managed risk solution.Matt chatted with me over Skype about a wide variety of security topics, including:Corporate conversations around security [...]
7MS #401: Tales of Internal Pentest Pwnage – Part 15
It’s episode 401 and we’re having fun, right? Some things we cover today:The Webinar version of the DIY Pwnagotchi evening will be offered in Webinar format on Tuesday, March 10 at 10 a.m.A quick house fire update - we’re closer to demolition now!I finally got a new guitar!Besides that, I’ve got a wonderful tale of pentest pwnage for you. Warning: this is a TBC (to [...]
7MS #400: Tales of Internal Pentest Pwnage – Part 14
Wow, happy 400th episode everybody! Also, happy SIXTH birthday to the 7MS podcast!Today I've got a really fun tale of internal network pentest pwnage to share with you, as well as a story about a "poop-petrator." Key moments and takeaways include:Your target network might have heavy egress filtering in place. I recommend doing full apt-get update and apt-get upgrade and grabbing all the tools you [...]
7MS #399: Baby’s First Password Cracking Rig
This podcast is sponsored by Arctic Wolf, whose Concierge Security teams Monitor, Detect and Respond to Cyber threats 24/7 for thousands of customers around the world. Arctic Wolf. Redefining cybersecurity. Visit Arcticwolf.com/7MS to learn more. Believe it or not I'm pentesting your stuff I never thought I could feel so free-hee-hee I compromised one of your Domain Admins Who it could be? The guy with [...]
7MS #398: Securing Your Network with Raspberry Pi Sensors
This podcast is sponsored by Arctic Wolf, whose Concierge Security teams Monitor, Detect and Respond to Cyber threats 24/7 for thousands of customers around the world. Arctic Wolf. Redefining cybersecurity. Visit Arcticwolf.com/7MS to learn more.I'll be your Raspberry Pi zero babyI don't know what else to sayI'll keep bad stuff off of your networkI will do it both night and dayToday I talk about four [...]
7MS #397: OPSEC Tips for Security Consultants
This podcast is sponsored by Arctic Wolf, whose Concierge Security teams Monitor, Detect and Respond to Cyber threats 24/7 for thousands of customers around the world. Arctic Wolf. Redefining cybersecurity. Visit Arcticwolf.com/7MS to learn more.I'm working on a new security song called Don't Let the Internet Get You Down, and the chorus will go something like this:Don't let the Internet get you downIt's full of [...]
7MS #396: Tales of Internal Pentest Pwnage – Part 13
This podcast is sponsored by Arctic Wolf, whose Concierge Security teams Monitor, Detect and Respond to Cyber threats 24/7 for thousands of customers around the world. Arctic Wolf. Redefining cybersecurity. Visit Arcticwolf.com/7MS to learn more.In last week's episode I was very close to potentially synching up some very sensitive data with my super secret back door account. In this episode, we resolve the cliffhanger and [...]
7MS #395: Tales of Internal Pentest Pwnage – Part 12
This podcast is sponsored by Arctic Wolf, whose Concierge Security teams Monitor, Detect and Respond to Cyber threats 24/7 for thousands of customers around the world. Arctic Wolf. Redefining cybersecurity. Visit Arcticwolf.com/7MS to learn more.In today's tale of pentest pwnage I got to try some tools and tricks for the first time! Here are the key points/takeaways from this test:It's great to have additional goals [...]