7 Minute Security's Substack

7 Minute Security's Substack

Home
Chat
Archive
About
Tuesday TOOLSday: egress filtering
A quick way to check what's allowed from your internal > external network
3 hrs ago • 
Brian Johnson
Tuesday TOOLSday: benefits of a security ticketing system
Ticketing + inventorying = good security
Oct 15 • 
Brian Johnson
20:06
Tuesday TOOLSday: mssqlkaren
Stealing SCCM creds with Karen's help!
Oct 7 • 
Brian Johnson
9:32
Tuesday TOOLSday: coercing HTTP auth w/scheduled tasks
Schtasks continue to be sneaky!
Oct 3 • 
Brian Johnson
1
22:15

September 2025

Tuesday TOOLSday: coercing SMB auth w/scheduled tasks
Didn't lead to domain admin, but I'll still take it!
Sep 26 • 
Brian Johnson
17:45
Tuesday TOOLSday: more IR fun with Velociraptor
Find evil on demand - and AT SCALE!
Sep 19 • 
Brian Johnson
1
16:42
Tuesday TOOLSday: Velociraptor
Spin up a live IR environment in minutes!
Sep 10 • 
Brian Johnson
1
14:39
Tuesday TOOLSday: privesc with schtasks
A privesc opportunity I've missed MANY times in the past!
Sep 4 • 
Brian Johnson
1
2
12:46

August 2025

Tuesday TOOLSday: Chimas
Better visualization for Snaffler output
Aug 29 • 
Brian Johnson
13:01
Tuesday TOOLSday: Ninja Hacker Academy - Part 8
WE FINALLY PWNED ALL OF NHA!
Aug 22 • 
Brian Johnson
1
19:52
Tuesday TOOLSday: Ninja Hacker Academy - Part 7
Spoiler: we got DA on ONE domain!
Aug 15 • 
Brian Johnson
22:08
Tuesday TOOLSday: Ninja Hacker Academy - Part 6
We're in striking distance of DA now!
Aug 5 • 
Brian Johnson
© 2025 Brian Johnson
Privacy ∙ Terms ∙ Collection notice
Start your SubstackGet the app
Substack is the home for great culture