7 Minute Security

Brian Johnson

7 Minute Security is a weekly information security podcast focusing on penetration testing, blue teaming and building a career in security. The podcast also features in-depth interviews with industry leaders who share their insights, tools, tips and tricks for being a successful security engineer.

Subscribe Listen in podnod RSS feed Show website

733 episodes
Updated Friday

Episodes733

Newest first

Nov 7, 2014 · 7 min
7MS #33: ProXPN (audio)
This episode's all about a cool product called ProXPN that I use to encrypt/anonymize my traffic for various reasons. Not a sponsored episode or anything like that, but I am a fan of this service :-). Download: 7MS #33: ProXPN (audio)
Nov 1, 2014 · 7 min
7MS #32: OSCP – part 3 (audio)
Been a while since I shared an update on OSCP progress. It's going good but…slow. However, I do have one (maybe obvious) tip to share that I hope will save you a ton of time. Download: 7MS #32: OSCP – part 3 (audio)
Oct 25, 2014 · 7 min
7MS #31: Network Detective (audio)
Network Detective is a tool we've been using as kind of an addendum to our full security assessment. It gives some nice, plain-English Excel spreadsheets and Word docs that report on AD health and structure, PC inventory and open ports, AV clients that aren't working right, and a whole lot more. Download: 7MS #31: Network Detective…
Oct 18, 2014 · 7 min
7MS #30: Managing Privileged Accounts (audio)
Most organizations I talk to have no idea where their privileged accounts are used across the network. I recently saw a demo of a solution called CyberArk, which seems to address that problem. Download: 7MS #30: Managing Privileged Accounts (audio)
Oct 11, 2014 · 7 min
7MS #29: Follow Up Then (audio)
This isn't necessarily related to security, but it's about one of my favorite tools to keep my todos organized: FollowUp Then! Download: 7MS #29: Follow Up Then (audio)
Sep 27, 2014 · 7 min
7MS #28: Infosec for Kids? (audio)
This is more of a random, wondering aloud type of episode as I think about raising my kids with infosec in mind. Specifically, what's life going to be like for them growing up in an Internet-soaked world where there are constantly text/video/photos of them going online – to stay forever? Download: 7MS #28: Infosec for Kids?…
Sep 20, 2014 · 7 min
7MS #27: Backing Up with CrashPlan (audio)
Hey, when it comes to backups…uh…you should have them! This is a NON-endorsed/sponsored episode about my personal favorite backup service called CrashPlan. Download: 7MS #27: Backing Up with Crashplan (audio)
Sep 13, 2014 · 7 min
7MS #26: The Importance of Training and Awareness (audio)
Training and awareness – specifically as it relates to infosec – is something companies can't spend enough $ on. But from my experience, not enough of them are making this a front-burner priority. This episode talks about one topic I'm particularly passionate about. I call it "How not to click on bad stuff." Download: 7MS #26:…
Aug 23, 2014 · 8 min
7MS #25: Writing Better Pentest Reports (audio)
This episode talks about some pointers, tools and tips towards writing better pentest reports. Download: 7MS #25: Writing Better Pentest Reports (audio)
Aug 16, 2014 · 7 min
7MS #24: Why Wireless Scares Me (audio)
This episode is all about why you should (probably not) use wireless hotspots, and keeping yourself safe in general when surfing the Web. Download: 7MS #24: Why Wireless Scares Me (audio)
Aug 9, 2014 · 7 min
7MS #23: OSCP – part 2 (audio)
In this episode I talk more about my adventures with OSCP and Offensive Security! . Download: 7MS #23: OSCP – part 2 (audio) Show notes: I recommend documenting ALL the exercises in the PDF. My understanding is that extra effort could be rewarded if you don't do so hot on your final exam. Buffer overflows make…
Jul 27, 2014 · 7 min
7MS #22: Phishing with Black Squirrel (audio)
In this episode I talk about using Black Squirrel to launch phishing campaigns! Download: 7MS #22: Phishing with Black Squirrel (audio) Show notes: Security Weekly is an excellent podcast/resource. Devour it regularly. Black Squirrel is the main tool discussed in this podcast. I've been using it for phishing campaigns and it's been excellent in that capacity.
Jul 20, 2014 · 7 min
7MS #21: OSCP – part 1 (audio)
In this episode I talk about my venture into Offensive Security! . Download: 7MS #21: OSCP – part 1 (audio) Show notes: It's official – I have a death wish and have started the OSCP training. This episode is the first of what I hope will be a multi-part, spoiler-free series about my experience with OSCP. With…
Jul 15, 2014 · 7 min
7MS #20: Moving from GoDaddy to DNSimple (audio)
In this episode I talk about why I'm pulling my domains from GoDaddy, and making DNSimple their new home. Download: 7MS #20: Moving from GoDaddy to DNSimple (audio) Show notes: The service I'm talking about in this podcast is DNSimple. Troy Hunt's humorous/awesome article pushed me over the edge and convinced me to give DNSimple a…
Jul 5, 2014 · 7 min
7MS #19: Kioptrix! (audio)
In this episode I talk about a deliciously vulnerable series of VMs called Kioptrix, and how you can use them to sharpen your pentesting skills. Download: 7MS #19: Kioptrix! (audio) Show notes: The Kioptrix series of VMs is here: http://www.kioptrix.com/blog/test-page/ and here: http://vulnhub.com/?q=kioptrix&sort=date-des&type=vm. Got approved for my OSCP training and I start it in a few…
Jun 22, 2014 · 7 min
7MS #18: Wireless Security 101 (audio)
In this episode I talk about some wireless security basics that we're not seeing when out on assessments. Download: 7MS #18: Wireless Security 101 (audio) Show notes: WEP encryption is very, very bad. It's easy to crack. Don't use it. Wifite will demonstrate how easy it is to crack WEP. Stronger encryption such as WPA/WPA2…
Jun 14, 2014 · 7 min
7MS #17: How to Pass the Certified Ethical Hacker Exam (audio)
In this episode I share my experience with EC-Council's Certified Ethical Hacker training and exam. Download: 7MS #17: How to Pass the Certified Ethical Hacker Exam (audio) Show notes: Here's info on the CEH training and test outline. I took my CEH training through UFairfax with instructor Leo Dregier. See this post I wrote that…
May 31, 2014 · 7 min
7MS #16: PwnPad Initial Impressions – part 2! (audio)
In this episode I talk about my first-hand experience using the PwnPad for wireless pentesting. Download: 7MS #16: PwnPad Initial Impressions – Part 2 Show notes: In a nutshell: PwnPad is a great tool to simplify/automate some wireless recon and/or hacking! PwnieExpress has a great write-up on mapping APs w/GPS coordinates using Google Earth here:…
May 24, 2014 · 6 min
7MS #15: PwnPad Initial Impressions (audio)
In this episode I talk about my initial impressions of using the PwnPad for wireless pentesting. Download: 7MS #15: PwnPad Initial Impressions Show notes: Carrying around a Nexus 7 instead of a bulky laptop to do wireless pentesting sure is nice! PwnPad scripts/automates much of the "busy work" to capture WPA handshakes.
May 10, 2014 · 6 min
7MS #14: H8 4 Win8 (audio)
In this episode I talk about two (sort of) security related tips that I've learned by using Windows 8 wrong. Download: 7MS #14: H8 4 Win8 (audio) Show notes: Windows Defender doesn't seem to auto-update on Win 8 unless you have updates set to auto download/install. I found a nifty script you can add as…