Want to learn about all of the latest security tools and techniques? This is the show for you! We show you how to install, configure and use a wide variety of security tools for both offense and defense. Whether you are a penetration tester or defending enterprise networks, this show will help you
Latest episodes
-
22 min
Evilginx2 Man-in-the-Middle Attacks - Tradecraft Security Weekly #29
Evilginx2 is a man-in-the-middle framework that can be utilized to intercept credentials including two-factor methods victims utilize when logging in to a web application. Instead…
-
14 min
Black Hat & DEF CON 2018 - Tradecraft Security Weekly #28
This is the Hacker Summer Camp 2018 edition of Tradecraft Security Weekly. In this week's episode Beau Bullock (@dafthack) talks about some of the more interesting items he saw com…
-
19 min
PXE Boot Attacks - Tradecraft Security Weekly #27
Network administrators often utilize Pre-boot Execution Environment (PXE) to rapidly deploy new systems on a network easily. Golden system images can be created with all the softwa…
-
13 min
OSINT & External Recon Pt. 2: Contact Discovery - Tradecraft Security Weekly #26
During the reconnaissance phase of a penetration test being able to discover employee names and email addresses of an organization is extremely important. It is also important to d…
-
19 min
Phishing 2FA Tokens with CredSniper - Tradecraft Security Weekly #25
Organizations are implementing two-factor on more and more web services. The traditional methods for phishing credentials is no longer good enough to gain access to user accounts i…
-
20 min
Evading Network-Based Detection Mechanisms - Tradecraft Security Weekly #24
In this episode of Tradecraft Security Weekly hosts Beau Bullock (@dafthack) and Mike Felch (@ustayready) discuss methods for evading network-based detection mechanisms. Many comme…
-
15 min
HTML5 Storage Exfil via XSS - Tradecraft Security Weekly #23
It is fairly common for pentesters to discover Cross-Site Scripting (XSS) vulnerabilities on web application assessments. Exploiting these issues potentially allow access to a user…
-
18 min
Linux Privilege Escalation - Tradecraft Security Weekly #22
After getting a shell on a server you may or may not have root access. To gain privileged access to a Linux system it may take performing more analysis of the system to find escala…
-
13 min
Leaking Windows Creds Externally Via MS Office - Tradecraft Security Weekly #21
In this episode of Tradecraft Security Weekly, Mike Felch discusses with Beau Bullock about the possibilities of using framesets in MS Office documents to send Windows password has…
-
13 min
Google Event Injection - Tradecraft Security Weekly #20
Google provides the ability to automatically add events to a calendar directly from emails received by Gmail. This provides a unique situation for phishing attempts as most users h…
-
14 min
Dissecting XXE Attacks - Tradecraft Security Weekly #19
When pentesting web services or an application that leverage XML files, XML External Entity (XXE) attacks are a great way to start. By injecting an XXE into a well crafted XML payl…
-
16 min
Domain Fronting - Tradecraft Security Weekly #18
Domain fronting is a technique used to mask command and control (C2) traffic. It is possible for C2 channels to be proxied through CDN's like Cloudfront to make it appear like norm…
-
16 min
Cracking Password Hashes Efficiently - Tradecraft Security Weekly #17
If you are a penetration tester password cracking is something you will inevitably do. On most engagements we typically don't have months on end to crack passwords. In an effort to…
-
12 min
Pivoting Tools Through Meterpreter - Tradecraft Security Weekly #16
There are a ton of modules in Metasploit that are extremely useful for performing various attacks post-exploitation. But sometimes there are external tools that you might want to u…
-
14 min
Identifying Weak Session Tokens Using Entropy - Tradecraft Security Weekly #15
Session management in web applications is extremely important in regards to securing user credentials and integrity within the application. Sometimes session tokens can be predicte…
-
13 min
Relaying NTLMv1/v2 - Tradecraft Security Weekly #14
A very common attack that many networks are vulnerable to is called LLMNR or NBT-NS poisoning. Through this attack it is possible to gain access to a user's NTLMv1 or v2 password h…
-
12 min
Black Hat & DEF CON 2017 - Tradecraft Security Weekly #13
There were a lot of amazing new tools and techniques released at Hacker Summer Camp 2017. In this week's episode of Tradecraft Security Weekly Beau Bullock (@dafthack) talks about…
-
10 min
Automating Screenshots to Quickly Assess Many WebApps - Tradecraft Security Weekly #12
On penetration tests we are often-times faced with very large external or internal attack surfaces that are made up of multiple web applications. When there is a need to assess tho…
-
12 min
Sensitive Data Discovery in Email with MailSniper - Tradecraft Security Weekly #11
Email tends to be the primary communication platform for employees of an organization. Often times sensitive data is transmitted from one internal employee to another via this mech…
-
9 min
Live Response with Google Rapid Response (Blue Team Edition) - Tradecraft Security Weekly #10
How do you perform incident response on systems in your environment at scale or when the system that needs to be analyzed is in a geographically different location than your analys…