7MS #667: Pentesting GOAD SCCM - Part 2!

7 Minute Security

#Security #Software Development #Tech News #Information Security #Brian Johnson #Tech #News

22:42

Bob Stobener , a seasoned leader celebrated for his adept communication skills, has a unique perspective on improving communication as a means to foster understanding and collaboration. Drawing from his creative background in cartooning and strategic advertising at a successful comedy club, Stobener believes that effective communication is essential not only for resolving conflicts but also for enhancing personal and professional growth. He emphasizes the importance of listening and forming genuine connections, demonstrating how these practices can lead to positive outcomes, as seen in his ability to guide team members toward fulfilling career paths. By advocating for open and honest dialogue, Stobener illustrates how strong communication skills can support individual success and organizational excellence across various industries. (00:01:52) Communication Skills: Comedy Club to Corporate Success (00:14:21) Transparent Interactions: The Foundation of Leadership Success (00:14:21) Transformative Impact of Transparent Leadership Communication (00:19:41) Mastering Communication Skills for Multifaceted Success Hosted by Larry Wilson Produced by: Verbal Ninja Productions Producer: R. Scott Edwards Sponsored by: The Wilson Method **Check out NEW upgraded website with FREE offer !! Visit: https://theWilsonMethod.com Link: TheWilsonMethod.com…

8 days ago 28:52

MP3•Episode home

Hey friends, our good buddy Joe “The Machine” Skeen and I are back this week with part 2 (check out part 1!) tackling GOAD SCCM again! Spoiler alert: this time we get DA! YAY!

Definitely check out these handy SCCM resources to help you – whether it be in the lab or IRL (in real life):

GOAD SCCM walkthrough
MisconfigurationManager – tremendous resource for enumerating/attacking/privesc-ing within SCCM
This gist from Adam Chester will help you decrypt SCCM creds stored in SQL

667 episodes

7MS #667: Pentesting GOAD SCCM - Part 2!

7 Minute Security

229 subscribers

published 8 days ago

MP3•Episode home

Hey friends, our good buddy Joe “The Machine” Skeen and I are back this week with part 2 (check out part 1!) tackling GOAD SCCM again! Spoiler alert: this time we get DA! YAY!

Definitely check out these handy SCCM resources to help you – whether it be in the lab or IRL (in real life):

GOAD SCCM walkthrough
MisconfigurationManager – tremendous resource for enumerating/attacking/privesc-ing within SCCM
This gist from Adam Chester will help you decrypt SCCM creds stored in SQL

667 episodes

#Security #Software Development #Tech News #Information Security #Brian Johnson #Tech #News

All episodes

1
7MS #668: Tales of Pentest Pwnage – Part 69 30:22

1 day ago30:22

30:22

Hola friends! Today’s tale of pentest pwnage talks about abusing Exchange and the Azure ADSync account! Links to the discussed things: adconnectdump – for all your ADSync account dumping needs! Adam Chester PowerShell script to dump MSOL service account dacledit.py (part of Impacket) to give myself full write privileges on the MSOL sync account: dacledit.py -action ‘write’ -rights ‘FullControl’ -principal lowpriv -target MSOL-SYNC-ACCOUNT -dc-ip 1.2.3.4 domain.com/EXCHANGEBOX$ -k -no-pass Looking to tighten up your Exchange permissions – check out this crazy detailed post…

1
7MS #667: Pentesting GOAD SCCM - Part 2! 28:52

8 days ago28:52

28:52

Hey friends, our good buddy Joe “The Machine” Skeen and I are back this week with part 2 (check out part 1 !) tackling GOAD SCCM again! Spoiler alert: this time we get DA! YAY! Definitely check out these handy SCCM resources to help you – whether it be in the lab or IRL (in real life): GOAD SCCM walkthrough MisconfigurationManager – tremendous resource for enumerating/attacking/privesc-ing within SCCM This gist from Adam Chester will help you decrypt SCCM creds stored in SQL…

1
7MS #666: Tales of Pentest Pwnage – Part 68 45:35

15 days ago45:35

45:35

Today we have a smattering of miscellaneous pentest tips to help you pwn all the stuff! Selective Snaffling with Snaffler The importance of having plenty of dropbox disk space – for redundant remote connectivity and PXE abuse! TGTs can be fun for SMB riffling, targeted Snaffling, netexec-ing and Evil-WinRM ing!…

1
7MS #665: What I'm Working on This Week - Part 2 28:49

22 days ago28:49

28:49

Hello there friends, I’m doing another “what I’m working on this week” episode which includes: BPATTY v1.6 release – big/cool/new content to share here PWPUSH – this looks to be an awesome way (both paid and free) to securely share files and passwords

1
7MS #664: What I’m Working on This Week 25:38

29 days ago25:38

25:38

In today’s episode I talk about what I’m working on this week, including: Playing with Sliver C2 and pairing it with ShellcodePack Talking about Netexecer, my upcoming tool that helps automate some of the early/boring stuff in an internal pentest A gotcha to watch out for if utilizing netexec’s MSSQL upload/download functionality…

1
7MS #663: Pentesting GOAD SCCM 29:41

5 weeks ago29:41

29:41

Today we live-hack an SCCM server via GOAD SCCM using some attack guidance from Misconfiguration Manager ! Attacks include: Unauthenticated PXE attack PXE (with password) attack Relaying the machine account of the MECM box over to the SQL server to get local admin

1
7MS #662: Pentesting Potatoes - Part 2 37:39

6 weeks ago37:39

37:39

Hi friends, today we're talking about pentesting potatoes (not really, but this episode is sort of a homage to episode 333 where I went to Boise to do a controls assessment and ended up doing an impromptu physical pentest and social engineer exercise). I talk about what a blast I'm having hunting APTs in XINTRA LABS , and two cool tools I'm building with the help of Cursor : A wrapper for Netexec that quickly finds roastable users, machines without SMB signing, clients running Webclient and more. A sifter of Snaffler -captured files to zero in even closer on interesting things such as usernames and passwords in clear text.…

1
7MS #661: Baby’s First Hetzner and Ludus – Part 2 37:53

7 weeks ago37:53

37:53

Today we continue our journey from last week where we spun up a Hetzner cloud server and Ludus.cloud SCCM pentesting range! Topics include: Building a Proxmox Backup Server (this YouTube video was super helpful) Bridging a second WAN IP to the Hetzner/Ludus server Wrestling with the Hetzner (10-rule limit!) software firewall When attacking SCCM – you can get a version of pxethief that runs in Linux !…

1
7MS #660: Baby's First Hetzner and Ludus 34:34

8 weeks ago34:34

34:34

I had an absolute ball this week spinning up my first Hetzner server, though it was not without some drama (firewall config frustrations and failing hard drives). Once I got past that , though, I got my first taste of the amazing world of Ludus.cloud , where I spun up a vulnerable Microsoft SCCM lab and have started to pwn it. Can’t say enough good things about Ludus.cloud, but I certainly tried in this episode!…

1
7MS #659: Eating the Security Dog Food - Part 8 28:29

9 weeks ago28:29

28:29

Today I’m excited about some tools/automation I’ve been working on to help shore up the 7MinSec security program, including: Using Retype as a document repository Leveraging the Nessus API to automate the downloading/correlating of scan data Monitoring markdown files for “last update” changes using a basic Python script…

1
7MS #658: WPA3 Downgrade Attacks 32:58

10 weeks ago32:58

32:58

Hey friends, today we cover: The shiny new 7MinSec Club BPATTY updates A talk-through of the WPA3 downgrade attack, complemented by the YouTube livestream

1
7MS #657: Writing Rad Security Documentation with Retype 20:36

11 weeks ago20:36

20:36

Hello friends! Today we’re talking about a neat and quick-to-setup documentation service called Retype . In a nutshell, you can get Retype installed on GitHub pages in about 5 minutes and be writing beautiful markdown pages (with built-in search) immediately. I still absolutely love Docusaurus , but I think Retype definitely gives it a run for its money.…

1
7MS #656: How to Succeed in Business Without Really Crying - Part 21 45:01

12 weeks ago45:01

45:01

Happy new year friends! Today we talk about business/personal resolutions, including: New year’s resolution on the 7MinSec biz side to have a better work/life balance New training offering in the works Considering Substack as a communications platform A mental health booster that I came across mostly by accident…

1
7MS #655: Happy Hacking Holidays 58:08

13 weeks ago58:08

58:08

Today we’re doing a milkshake of several topics: wireless pentest pwnage, automating the boring pentest stuff with cursor.ai , and some closing business thoughts at 7MinSec celebrates its 7th year as a security consultancy. Links discussed today: AWUS036ACH wifi card (not my favorite anymore) Panda PAU09 N600 (love this one!) The very important Github issue that helped me better understand BPFs and WPA3 attacks TrustedSec article on WPA3 downgrade attacks…

1
7MS #654: Tales of Pentest Pwnage – Part 67 41:50

15 weeks ago41:50