Paul's Security Weekly Subscribe

Got Privs? Extract and Crack the Creds – Paul’s Security Weekly #555

April 13, 2018

In the bad old days we used to exploit LSASS memory to dump hashed credentials from memory. When dealing with a domain controller, and a large environment this is dangerous. This segment will address a safer way to extract hashed credentials from the environment for subsequent download, and cracking. Full Show Notes: https://wiki.securityweekly.com/Episode555 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

Full episode and show notes

Related

Vulnerability Management

AI, American Water, Broadband, Claroty, Okta, Meta, Phishing, Robocop, Josh Marpet… – SWN #420

October 8, 2024

AI Fest, American Water, Broadband, Claroty, Okta, Meta, Phishing, Robocop, Josh Marpet, and more on the Security Weekly News.

Risk Assessments/Management

Tokyo DriftSec: Who is going First? Who is going Smooth? – Lisa Landau – CSP #195

October 8, 2024

Let’s talk to our favorite Tokyo security leader about how she has experienced tool selection across the world. To be risk adverse or not to be risk adverse. What a question! Segment Resources: https://www.youtube.com/watch?v=BdFzJxSemKo

Run Your Security Program Like an Election Campaign – Kush Sharma – BSW #367

October 7, 2024

Does the CISO need to act like a politician? Negotiating budgets, communicating risks, and selling your strategy across the organization does sound a little like a politician. And if that's the case, are you hiring the right campaign staff? Kush Sharma, former CISO for CPR, City of Toronto, and Saputo, joins Business Security Weekly to discuss wh...