Podcast Episodes

7MS #676: Tales of Pentest Pwnage – Part 72

Today's fun tale of pentest pwnage discuss an attack path that would, in my opinion, probably be impossible to detect…until it's too late.

10 months, 1 week ago

View Episode

7MS #675: Pentesting GOAD – Part 2

Hey friends! Today Joe "The Machine" Skeen and I tackled GOAD (Game of Active Directory) again – this time covering:

SQL link abuse between two doma…

10 months, 2 weeks ago

View Episode

7MS #674: Tales of Pentest Pwnage – Part 71

Today's tale of pentest pwnage is another great one!  We talk about:

The SPNless RBCD attack (covered in more detail in this episode) Importance of …

10 months, 3 weeks ago

View Episode

7MS #673: ProxmoxRox

Today we're excited to release ProxmoxRox – a repo of info and scripts to help you quickly spin up Ubuntu and Windows VMs.  Also, some important news…

11 months ago

View Episode

7MS #672: Tales of Pentest Pwnage – Part 70

Today's a fun tale of pentest pwnage where we leveraged a WinRM service ticket in combination with the shadow credentials attack, then connected to a…

11 months, 1 week ago

View Episode

7MS #671: Pentesting GOAD

Hello! This week Joe "The Machine" Skeen and I kicked off a series all about pentesting GOAD (Game of Active Directory).  In part one we covered:

Ch…

11 months, 2 weeks ago

View Episode

7MS #670: Adventures in Self-Hosting Security Services

Hi friends, today I'm kicking off a series talking about the good/bad/ugly of hosting security services. Today I talk specifically about transfer.zip…

11 months, 3 weeks ago

View Episode

7MS #669: What I'm Working on This Week – Part 3

Hi friends, in this edition of what I'm working on this week:

3 pulse-pounding pentests that had…problems Something I'm calling the unshadow/reshado…

11 months, 4 weeks ago

View Episode

7MS #668: Tales of Pentest Pwnage – Part 69

Hola friends! Today's tale of pentest pwnage talks about abusing Exchange and the Azure ADSync account! Links to the discussed things:

adconnectdump…

1 year ago

View Episode

7MS #667: Pentesting GOAD SCCM - Part 2!

Hey friends, our good buddy Joe "The Machine" Skeen and I are back this week with part 2 (check out part 1!) tackling GOAD SCCM again!  Spoiler alert…

1 year ago

View Episode