7 Minute Security

Nov 15 2024 649 ep. 25 mins 1.7k
7 Minute Security Podcast artwork

7 Minute Security is a weekly information security podcast focusing on penetration testing, blue teaming and building a career in security. The podcast also features in-depth interviews with industry leaders who share their insights, tools, tips and tricks for being a successful security engineer.

  Technology  News
RSS feed Share
Copy RSS


Subscribe on Podcast Addict


7MS #650: Tales of Pentest Pwnage - Part 65

Nov 15 2024 53 mins  
Oooooo, giggidy! Today is (once again) my favorite tale of pentest pwnage. I learned about a feature of PowerUpSQL that helped me find a “hidden” SQL account, and that account ended up being the key to the entire pentest! I wonder how many hidden SQL accounts I’ve missed on past pentests….SIGH! Check out the awesome BloodHound gang thread about this here. Also, can’t get

7MS #649: First Impressions of Twingate

Nov 08 2024 72 mins  
Today we take a look at a zero-trust / ditch-your-VPN solution called Twingate (not a sponsor but we’d like them to be)! It also doubles nicely as a primary or backup connection for your DIY pentest dropboxes which we’ve talked about quite a bit here. In other news, we’ve moved from Teachable to Coursestack, so if you’ve bought training/ebooks with us before, you should’v

7MS #648: First Impressions of Level.io

Nov 01 2024 40 mins  
Hey friends, today I’m sharing my first (and non-sponsored) impressions of Level.io, a cool tool for managing Windows, Mac and Linux endpoints. It fits a nice little niche in our pentest dropbox deployments, it has an attractive price point and their support is fantastic.

7MS #647: How to Succeed in Business Without Really Crying – Part 19

Oct 25 2024 22 mins  
Today we’re talkin’ business – specifically how to make your report delivery meetings calm, cool and collect (both for you and the client!).

7MS #646: Baby’s First Incident Response with Velociraptor

Oct 18 2024 16 mins  
Hey friends, today I’m putting my blue hat on and dipping my toes in incident response by way of playing with Velociraptor, a very cool (and free!) tool to find evil in your environment. Perhaps even better than the price tag, Velociraptor runs as a single binary you can deploy to spin up a server and then request endpoints to “phone home” to you by way of GPO scheduled task.

7MS #645: How to Succeed in Business Without Really Crying - Part 18

Oct 13 2024 31 mins  
Today I do a short travelogue about my trip to Washington, geek out about some cool training I did with Velociraptor, ponder drowning myself in blue team knowledge with XINTRA LABS, and share some thoughts about the conference talk I gave called 7 Ways to Panic a Pentester.

7MS #644: Tales of Pentest Pwnage – Part 64

Oct 04 2024 41 mins  
Hey! I’m speaking in Wanatchee, Washington next week at the NCESD conference about 7 ways to panic a pentester! Today’s tale of pentest pwnage is a great reminder to enumerate, enumerate, enumerate! It also emphases that cracking NETLM/NETNTLMv1 isn’t super easy to remember the steps for (at least for me) but this crack.sh article makes it a bit easier!

7MS #643: DIY Pentest Dropbox Tips – Part 11

Sep 27 2024 26 mins  
Today we continue where we left off in episode 641, but this time talking about how to automatically deploy and install a Ubuntu-based dropbox! I also share some love for exegol as an all-in-one Active Directory pentesting platform.

7MS #642: Interview with Ron Cole of Immersive Labs

Sep 23 2024 42 mins  
Ron Cole of Immersive Labs joins us to talk pentest war stories, essential skills he learned while serving on a SOC, and the various pentest training and range platforms you can use to sharpen your security skills! Here are the links Ron shared during our discussion: VetSec Fortinet Veterans Program Immersive Labs Cyber Million FedVTE

7MS #641: DIY Pentest Dropbox Tips – Part 10

Sep 13 2024 27 mins  
Today we’re revisiting the fun world of automating pentest dropboxes using Proxmox, Ansible, Cursor and Level. Plus, a tease about how all this talk about automation is getting us excited for a long-term project: creating a free/community edition of Light Pentest LITE training!