7 Minute Security

Mar 28, 2025

Hola friends! Today’s tale of pentest pwnage talks about abusing Exchange and the Azure ADSync account! Links to the discussed things:

• adconnectdump – for all your ADSync account dumping needs!
• Adam Chester PowerShell script to dump MSOL service account
• dacledit.py (part of Impacket) to give myself full write...

Mar 21, 2025

Hey friends, our good buddy Joe “The Machine” Skeen and I are back this week with part 2 (check out part 1!) tackling GOAD SCCM again!  Spoiler alert: this time we get DA!  YAY!

Definitely check out these handy SCCM resources to help you – whether it be in the lab or IRL (in real life):

• GOAD SCCM walkthrough

Mar 14, 2025

Today we have a smattering of miscellaneous pentest tips to help you pwn all the stuff!

• Selective Snaffling with Snaffler
• The importance of having plenty of dropbox disk space – for redundant remote connectivity and PXE abuse!
• TGTs can be fun for SMB riffling, targeted Snaffling, netexec-ing and 

Mar 7, 2025

Hello there friends, I’m doing another “what I’m working on this week” episode which includes:

• BPATTY v1.6 release – big/cool/new content to share here
• PWPUSH – this looks to be an awesome way (both paid and free) to securely share files and...