7 Minute Security

Latest Episodes:

7MS #611: Pentestatonix Feb 19, 2024

Show notes

Hey friends, sorry for the late episode but I've been deep in the trenches of pentest adventures. I'll do a more formal tale of pentest pwnage when I come up for air, but for now I wanted to share some tips I've picked up from recent engagements:

GraphRunner - awesome PowerShell toolkit for interacting with Microsoft Graph API. From a pentesting perspective, it may help you bridge the "gap" between LAN-side AD and Azure and find some goodies - like files with and XSLX extension containing the word password.
PowerUpSQL -I typically use this to make SQL servers cough me up a hash via SMB using stored procedures, but I learned this week that I'll deeeefffffinitely use the Invoke-SQLAudit -Verbose functionality going forward.

7MS #610: DIY Pentest Dropbox Tips – Part 9 Feb 09, 2024

Show notes

Hey friends, today we cover a funstrating (that's fun + frustrating) issue we had with our DIY pentest dropboxes. TLDL:

The preseed file got jacked because I had a bad Kali metapackage in it.
While I was tinkering around with preseed files, I decided it would be more efficient to have the Kali ISO call that preseed file directly over HTTP (rather than make a new ISO every time I made a preseed change). To accomplish that:
- Mount the Kali ISO
- Explore to isolinux > txt.cfg
- Modify the txt.cfg to include a custom boot option that calls your preseed over HTTP. For example:

label install menu label ^Install Yermaum kernel /install.amd/vmlinuz append net.ifnames=0 preseed/url=https://somewebsite/kali.preseed locale=en_US keymap=us hostname=kali777 domain=7min.sec simple-cdd/profiles=kali desktop=xfce vga=788 initrd=/install.amd/initrd.gz --- quiet

7MS #609: First Impressions of Sysreptor Feb 02, 2024

Show notes

Hey friends, today is a first impressions episode about Sysreptor, which according to their GitHub page, is a fully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike. It is easy to stand up with Docker, has built-in MFA and a great hybrid WYSIWYG/code editor. The only scary part? There is no export to Word (insert suspenseful music here!) - your reports just go right to PDF, friends! The killer feature for us, though, is the ability to create reports from the command line and send files, notes and findings to Sysreptor automagically!

7MS #608: New Tool Release - EvilFortiAuthenticator Jan 26, 2024

Show notes

Hey friends, today our pal Hackernovice joins us for a tool (actually two tools!) release party:

- EvilFortiAuthenticator - it's like a regular FortiAuthenticator, but evil. This tool allows you to capture the FortiAuthenticator API and subsequently steal the entire device's config, subsequently allowing you to restore the config to a second server and potentially steal cleartext Active Directory creds and SMTP accounts! We talk about
  - BulletsPassView - a tool that originially allowed us to simply unmask the "hidden" API key in the FortiAuthenticator client (this did NOT work in the latest version of FAC).
  - Once you get the API key, check out Fortinet's documentation to do fun things like dump the whole config to a file on disk!
  - After you steal the config and restore it to a fresh FortiAuthenticator, use maintenance mode to reset the admin password.
  - Once you can adjust the restored config to your liking, try using MITMsmtp to capture email server creds in the clear!
- TCMLobbyBBQ - this tool has nothing to do with security, but helps PC players of the Texas Chain Saw Massacre get into lobbies more efficiently.

7MS #607: How to Succeed in Business Without Really Crying - Part 15 Jan 19, 2024

Show notes

Today we talk about some business-y things like:

A pre first impressions opinion on Sysreptor
Why I'm not worried about AI replacing manual pentesting (yet)
My struggle with going "full CEO" vs. staying in the weeds and working on hands-on security projects

7MS #606: Hacking OWASP Juice Shop (2024 edition) Jan 12, 2024

Show notes

Today our pals Bjorn Kimminich from OWASP and Paul from Project7 and TheUnstoppables.ai join us as we kick off a series all about hacking the OWASP Juice Shop, which is "probably the most modern and sophisticated insecure web application!" We got a few wins on the Juice Shop score board today:

Found the score board
Bullied the chatbot
Fired a DOM XSS
Located a confidential document
Gave the Juice Shop a devastating zero stars review
Fired a DOM XSS which played the OWASP Juice Shop Jingle

7MS #605: Navigating the Demands of Tech Leadership with Amanda Berlin of Blumira Jan 05, 2024

Show notes

Today our friend Amanda Berlin, Lead Incident Detection Engineer at Blumira, joins us to talk about being more mentally healthy in 2024!

P.S. - did you miss Amanda's past visits to the program? Then check out episode 518, 536 and 588.

Be sure to check out the next edition of Amanda's Defensive Security Handbook when it comes out in later January, 2024!

7MS #604: A Two Tool Teaser Jan 02, 2024

Show notes

Today we tease two upcoming tool releases (shooting for Q1, 2024):

TCMLobbyBBQ - a Python script for PC players of The Texas Chain Saw Massacre game to help players get out of lobbies and into live games ASAP! The script uses PyAutoGUI to take screenshots of what part of the game you're in, then make appropriate key presses and mouse clicks to get into lobby queues, then alert you when the game actually starts!
EvilFortiAuthenticator - this tool will allow you to steal administrator API tokens from FortiAuthenticator which can lead to full compromise of the physical device.

Happy new year!

7MS #603: Monitoring Your Tailscale Network with Uptime Kuma Dec 24, 2023

Show notes

Today I look at potentially replacing Splashtop and UptimeRobot (check out our episode about it here) with Tailscale and Uptime Kuma. The missing link (which I'd love some help with) is answering this security question: how can I setup Tailscale so that my 7MinSec testing box can connect to all these NUCs spread around the globe, but those NUCs cannot connect to each other (in case one is compromised)? Got some ideas? Let me know please!

7MS #602: How to Succeed in Business Without Really Crying - Part 14 Dec 15, 2023

Show notes

Today we're talkin' business! Specifically:

How to (gently) say "no" to (some) client projects
How to (politely) challenge end-of-year deadlines
An idea I'm kicking around in the lab - where I might do away with UptimeRobot and Splashtop in favor of Tailscale and Uptime Kuma

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected