Preview Mode Links will not work in preview mode

7 Minute Security

Jun 14, 2024

Hey friends, today we talk about some not-so-glamorous but ever-so-important stuff related to running a cybersecurity consultancy, including:

  • Taking an inventory of all the SaaS stuff your business uses – to keep an eye on spending, know when services are expiring, and track which credit card the services are tied to...

Jun 10, 2024

Hey friends, today we continue our series all about migrating from VMWare to the world Proxmox!  Specifically:

  • Getting my first Proxmox-based NUCs out in the field for live engagements!
  • Pulling the trigger on two bare-metal Proxmox servers to eventually replace my vCenter environment.

May 31, 2024

Hey friends, today we’ve got a security milkshake episode about Web app pentesting. Specifically we talk about:

  • Burp Suite Enterprise
  • Caido – a lightweight alternative to Burp
  • wfuzz – Web fuzzer.  Using a proxy:wfuzz -c -z file,/usr/share/wfuzz/wordlist/Injections/XSS.txt –sc...

May 24, 2024

Road trip time! I’ve been traveling this week doing some fun security projects, and thought all this highway time would be a perfect opportunity to take a dip into the 7MS mail bag!  Today’s questions include:

  • How do you price internal network penetration tests?
  • Have you ever had to deal with a difficult client...

May 17, 2024

Today’s tale of pentest pwnage is all about my new favorite attack called SPN-less RBCD. We did a teaser episode last week that actually ended up being a full episode all about the attack, and even step by step commands to pull it off.  But I didn’t want today’s episode to just be “Hey friends, check out the...