7MS #550: Tales of Pentest Fail - Part 5

Dec 9, 2022

This podcast is sponsored by Arctic Wolf, whose Concierge Security teams Monitor, Detect and Respond to Cyber threats 24/7 for thousands of customers around the world. Arctic Wolf. Redefining cybersecurity. Visit Arcticwolf.com/7MS to learn more.

Hey friends, today's episode is extra special because it's our first episode we've ever done live and with video(!). Will we do it again? Who knows. But anyway, we had a fun time talking about things that have gone not so well during pentesting lately, specifically:

• Things we keep getting caught doing (and some potential ways to not get caught!
  • Responder
  • SharpHound
  • CrackMapExec - specifically running -x or -X to enumerate systems
  • PowerHuntShares
• "FUD sprinklers" - people who cast fear, uncertainty and doubt on your pentest findings
• A story about the time I took down a domain controller (yikes)