Tradecraft Security Weekly Subscribe

Pivoting Tools Through Meterpreter – Tradecraft Security Weekly #16

August 24, 2017

There are a ton of modules in Metasploit that are extremely useful for performing various attacks post-exploitation. But sometimes there are external tools that you might want to use that are not included in Metasploit. It's possible to proxy other external tools through a Meterpreter session using a module in Metasploit and proxychains. In this episode Derek Banks (@0xderuke) and Beau Bullock (@dafthack) talk about how to pivot external tools through Meterpreter sessions and demo how to dump Kerberos tickets using this method. LINKS: BHIS Toast to Kerberoast Blog - https://www.blackhillsinfosec.com/a-toast-to-kerberoast/

Full episode and show notes

Related

Vulnerability Management

AI, American Water, Broadband, Claroty, Okta, Meta, Phishing, Robocop, Josh Marpet… – SWN #420

October 8, 2024

AI Fest, American Water, Broadband, Claroty, Okta, Meta, Phishing, Robocop, Josh Marpet, and more on the Security Weekly News.

Risk Assessments/Management

Tokyo DriftSec: Who is going First? Who is going Smooth? – Lisa Landau – CSP #195

October 8, 2024

Let’s talk to our favorite Tokyo security leader about how she has experienced tool selection across the world. To be risk adverse or not to be risk adverse. What a question! Segment Resources: https://www.youtube.com/watch?v=BdFzJxSemKo

Run Your Security Program Like an Election Campaign – Kush Sharma – BSW #367

October 7, 2024

Does the CISO need to act like a politician? Negotiating budgets, communicating risks, and selling your strategy across the organization does sound a little like a politician. And if that's the case, are you hiring the right campaign staff? Kush Sharma, former CISO for CPR, City of Toronto, and Saputo, joins Business Security Weekly to discuss wh...