7 Minute Security

Documentation is super boring, right? Yet it's critical to getting your client/audience excited about making their security better! In this episode I talk about my mixed feelings towards the "big" standards like ISO/NIST/etc. and how a more tactical,...

Been having a blast working with the beta branch of the project and it anxious to try the latest fixes of the beta branch. Give it a look! I also spent a lot of time the last few nights playing with and love it. After zipping through the install...

Today's episode is a horror story about how I recently lost 5+ years of backups due to what I'm calling a...small clerical error. Yes, this oopsie was 100% my fault, but I think backup providers can do a better job of warning us (via text or...

This week I've continued to play with the awesome IDS solution you can throw on a Raspberry Pi 3. A big update to share is that there is a beta branch which has some cool new features, such as the ability to break the Bro + ELK stack across multiple...

I've been wanting to get a IDS installed for a long time now - and for several reasons: It looks fun! My customers have expressed interest It will be part of my upcoming session. So this weekend I started getting the hardware portion ready,...

I was pleasantly surprised to see a Wordpress site fall into a pentest scope this past week. One helpful tool to get familiar with when attacking Wordpress sites is , which is built right into Kali - or you can grab it from . Get familiar with the...

Tell me I can't be the only one who regularly wants to combine a bunch of small Nessus scans files into a big fat Nessus scan file, and then make pretty pictures/graphs/summaries that the customer can easily understand? Over the last few weeks I...

Through kind of a weird series of events, I have an opportunity to speak at this summer in Vegas (baby!). I'll be talking about some things you can do if you suspect your perimeter is breached, as well as low-hanging fruit you can implement to better...

This week I had the fun opportunity to do a "blind" network security assessment - where basically we had to step into a network we'd never seen before and make some security posture recommendations. I've found that the following software/hardware is...

I'm continuing to love the our and had a chance to use it on a customer assessment this week. For the most part the setup/install was a breeze. Just had a few hiccups that the Pwnie support team straightened me out on right away. In the episode I...