• Logging into a SQL instance

• Using SQL stored procedures to coerce the SQL server to send an SMB connection to your attacking system

• Opportunities to capture/relay/crack high-privilege SQL creds

Leave a comment

Enjoy!

-Brian

Today I’m giving you a nickel tour of how we use snaffler to find interesting files/folders via SMB on a pentest, and then parse through those in a pretty GUI via chimas.

Subscribe now

Have a great week!

-Brian

Have a great week!

-Brian

Hey friends! Yes, I know it’s Wednesday. Nobody but my mom keeps track of that, so let’s all just relax and enjoy another (technically) Tuesday TOOLSday.

This week’s tool is a fun one, courtesy of the unstoppable Paul Wilch. I was whining to him about my hands getting sore at the end of a long day of banging out a million emails and forty-seven reports, and he pointed me at VoiceInk — a Mac app that uses local AI models to transcribe your voice to text with near-perfect accuracy and complete privacy.

That “local” part is the whole reason I picked it up. I love being able to dictate emails, chunks of reports, random song ideas, and hobby stuff without piping a live stream of my brain into Claude or ChatGPT. Set a hotkey, start talking, hit the key again, and your words drop right into whatever you’re working on. I assigned the right Alt key and now I can rattle off something like “don’t forget to note that I found SQL injection on the login page, and the internal pen test needs network segmentation testing done tomorrow after hours” — and it lands scary-accurate. I’m talking T-1000 Terminator accurate.

Here’s what I get into in this video:

• Why a privacy-first, fully local transcription tool scratched an itch for me (no cloud, no data leaving the Mac)

• The hotkey-to-dictate workflow and how clean the output is straight out of the gate

• Feeding it a full 32-minute 7MS episode and watching it transcribe — even nicely broken out by paragraph, which my tangent-filled podcasts desperately need

• The Parakeet V3 local model they suggest, plus the pile of other models you can swap in

• Handy extras: transcription history, custom word replacements for buzzwords/branded terms it fumbles, and an optional Claude/ChatGPT API hookup for cleanup (which I’m leaving OFF to keep mine local-only)

• The price that sold me: ~$69 for a lifetime license on up to 3 devices. Not per year.

Full disclosure: this is not a sponsorship or partnership — just a tool I bought blindly for ~70 bucks figuring it’d be worth it even if I barely used it, and so far I’m a fan.

One heads-up before you go clicking: VoiceInk is Apple Silicon Mac only and needs macOS 14.4 or later, so check your specs first.

I’m still just getting into it — I’d honestly love to batch-feed every 7MS episode through this and get a big searchable show-notes page going somewhere (CLI? Whisper? we’ll see). If you’ve been using VoiceInk, hit me up and tell me what modes and models are working for you.

Have yourself a great rest of your day — and as always, we’re at 7MinSec.com if you need anything from us.

-Brian

Have you given Insight a Recon a spin? If so, what did you think?

Leave a comment

Comments/questions/insults for me?

Want to support our efforts?

Subscribe now

-Brian

• Switch to the bitwarden user before you fire the install script

• Setup SMTP switches in the main config file, register yourself (and/or your team), and then flip a flag in the config file to disable public registrations (if you don’t want random folks registering for an account)

• The install guide makes it easy to update the instance. I’m going to setup a cron job to run the update every night, as Claude tells me Bitwarden has had a few eyebrow-raising vulns in the past

Leave a comment

Comments/questions/insults for me?

-Brian

Curious - is your company using any self-hosted password tools like this?

Leave a comment

Questions/comments for me?

Thanks,

-Brian

Thanks,
Brian

-Brian

Subscribe now

Leave a comment

Have you played with Dracarys? Let me know!

Leave a comment

-Brian

Locksmith is a PowerShell-based tool to make ADCS security assessments wayyyy easier. The only challenge I’ve had with it is that it doesn’t work from a non-domain-joined box. Well that is no longer a problem thanks to Locksmith2! Check it out - plus Locksmith2’s awesome pretty dashboard - in today’s video!

-Brian

• Install overview

• Building your first payload

• Obfuscation techniques

• Getting an initial shell

• Privesc to SYSTEM shell

• Mimikatz maximum pwnage!

P.S. I’m thinking of doing a live, long livestream (multiple hours?) where I pwn Ninja Hacker Academy from start to finish. I want to even include the install/setup/configuration of Mythic and use it throughout the stream. What do you think? Fun, or dumbest thing ever? Let me know!

Leave a comment

Thanks,
Brian

• Install UptimeKuma

• Install Assistant

• Research scary movies

• Create a “daily digest” email with info I care about

…and I’ve only scratched the service. This is awesome!

-Brian

Yes, I know it’s Wednesday — sorry, mom. 😅 But I’ve got a new Tuesday TOOLSday for you anyway!

This week I’m announcing a brand new GitHub repo: 7MinSec WikiScripts — a soon-to-be-growing collection of scripts (built with a lot of AI help) to make pentesting life easier. You can find it linked from the Scripts section over at 7MinSec.wiki.

The repo is organized into folders for lab setup, Dropbox deployments, maintenance tasks, and pentesting goodies. The first script out of the gate is install-exegol.sh — a one-shot installer for Exegol, which is basically my must-have toolkit for every internal network pentest. It bundles CrackMapExec, Impacket, Responder, and a ton more into a clean container environment so you’re not wrestling with dependency nightmares on a fresh Kali box.

Check out the video, grab the script, and let me know what you think!

Have a great week,

Brian

The short version: Brick is a small NFC device (magnetic back, so I stuck mine on the fridge) that pairs with the Brick app. You pick the apps you want bricked — socials, games, whatever your time-sucks are — and tap your phone to the device to enable “mindfulness mode.” To get those apps back, you have to physically walk over and tap again. That tiny bit of friction has been surprisingly effective at breaking my continual “pocket check” habit.

A few things I dig about it:

• $50 one-time fee, no subscription

• One brick pairs with multiple devices (good for the family)

• 5 emergency unbricks are allowed within the app (if you’re stuck somewhere without the physical device)

• Lets you schedule brick/unbrick on a timer without the physical device (great for a “Tommy Needs Sleepy” wind-down)

Grab one at getbrick.com if you’re curious. (7MinSec is not a sponsor, not an affiliate, this is not an ad, etc.)

Got your own focus/mental health hacks for fellow burnt-out IT folks? Leave a comment!

Thanks,

-Brian

In today’s Tuesday TOOLSday I wanted to (re)introduce you to 7MinSec.wiki and some new/updated pages I pushed in April, including:

• A way to reboot your Mac remotely and skip FileVault protections

• RunasCs - when for whatever reason runas won’t cut it

• Why I use Twingate, like, all the time now

• …and more!

Have a great week,

Brian

• 7MS #711: How to Secure Your Community

• 7MS #712: How to Secure Your Community – Part 2

• 7MS #713: How to Secure Your Community – Part 3

I’m getting back into the regular swing of things now, and plan on posting regular 7MinSec.club content starting in April. I’m not sure if I’ll go back to a strict “Tuesday TOOLSday” schedule we used to have. I’m entertaining the idea of being a bit more frequent in posting throughout the week, rather than a formal big post on Tuesdays. Either way, thanks for your patience and I look forward to getting back into the swing of things in April.

Leave a comment

Brian

Subscribe now

-Brian

Enjoy!

Subscribe now

-Brian