May 30, 2025
Hi everybody. Today I take it easy (because my brain is friend from the short week) to tell you about the time I think my HP laptop was compromised at the factory!
May 27, 2025
Today’s fun tale of pentest pwnage discuss an attack path that would, in my opinion, probably be impossible to detect…until it’s too late.
May 16, 2025
Hey friends! Today Joe “The Machine” Skeen and I tackled GOAD (Game of Active Directory) again – this time covering:
- SQL link abuse between two domains
- Forging inter-realm TGTs to conquer the coveted sevenkingdoms.local!
Join us next month when we aim to overtake essos.local, which will make us rulers over all...
May 9, 2025
Today’s tale of pentest pwnage is another great one! We talk about:
- The SPNless RBCD attack (covered in more detail in this episode)
- Importance of looking at all “branches” of outbound permissions that your user has in BloodHound
- This devilishly effective MSOL-account-stealing PowerShell script (obfuscate it...
May 3, 2025
Today we’re excited to release ProxmoxRox – a repo of info and scripts to help you quickly spin up Ubuntu and Windows VMs. Also, some important news items:
- 7MinSec.club in-person meeting is happening Wednesday, May 14! More details here.
- We did our second Tuesday TOOLSday this week and showed you some local...