Episode 129 - PowerScripting Podcast - Security Ninja Dave Kennedy on Ethical Hacking with PowerShell

Dave Kennedy on ethical hacking using PowerShell

 

News

Execute commands and scripts from anywhere including the office
and remote locations, as well as from a Web browser or smart
phone with PowerGUI Pro from Quest Software. With the MobileShell
feature, administrators can quickly run commands to troubleshoot
problems or make changes, even when away from your desk! This
gives teams more flexibility to work remotely while traveling,
and to leverage admins from other offices in case of an
emergency.


·         Execute
queries remotely to determine if services or processes are
running


·         Restart
services, processes, or entire servers


·         Check
mailbox settings


·         Unlock
user accounts


·         Reset
passwords


·         Run custom
scripts


Visit quest.com/powerguipro and see why PowerShell and
Quest PowerGUI are the ultimate Windows management tools.



Usergroup news:

Atlanta PSUG next meeting is Nov 16th with Ed Wilson
speaking

November Arizona PowerShell User Group meets Nov 3rd.
Topic is building GUIs using PrimalForms



New PowerShell Usergroup: Minneapolis and Saint Paul




PowerGUI Pro and PowerGUI 2.2 are out!

Doug Finke will be doing a PowerShell session at the
Westchester Code Camp Nov 6th



Intel vPro Expert Center Blog: Version 2 of the PowerShell
Module for Intel vPro Technology released


A reminder that the PowerGUI Challenge 2010 is underway until
Nov15th

Jonathan Medd posted a discount code for PowerShell in
Practice



Announcing the New PowerShell Virtual Chapter of PASS!




 
Interview

Our interview is brought to you by SAPIEN Technologies, makers of
PrimalScript and PrimalForms.


 


Links:


 


Social-Engineer.org podcast

Book choice: Pro Windows
PowerShell: http://apress.com/book/view/9781590599402

Chatroom Buzz

 


## favorite linux distros?

Backtrack/ubuntu



## Scripting language/Programming language history

Python



## how about how SET came to be?

### what did you develope for backtrack?

Q: how simular do you see python and psh?

## this sounds like a n00b question probably, but has dave
used python 3 or stuck with python 2.x? i've struggled with the
ctypes he mentioned with 3.x.

Q: do you use psh automation scripts to do system tests?

## would you say most networks are turtle shells?

## thoughts on Certified Ethical Hacker cert?

### great description on what the tool is and some backround
on it but did you just say one day "hey i want to be able to do
something like this automaticaly" or was it someone who wanted
the tool?

CISSP = if you didn't know how to secure a machine before the
cert.. you still don't after..

## best ways to sell security to decision makers? Opportunity
cost?  Disaster scenarios?

## how has dave used powershell in a test? i have not
listened to his defcon talk. i can see where powershell can be
handy since it's almost on every server. like wmi via powershell?

Q: is a recorded session or powerpoint slides available for
posting in the notes from his defcon session

## Have you looked at attacking winrm or did you play with
remoting at all?

##By a weak SA password are describing a brute force attack
on the SA, to the SMO?

## how often do new security tools come out? Or are there
more updates to existing tools?

Q: How often is he using psh for testing?

## Q what resouces has Dave used to learn more about
powershell scripting and how to use it? 

## how 'powerful' is PS compared to linux/bash?

## What did you not like in PowerShell when learning it?

## What would you do to secure powershell from people like
you?

## He's mentioned execution restriction policy twice... what
makes them so weak?

but flash can't see through....walls



 


 


Hero - Superman
Resources

This segment brought to you by ServerFault.com


 


The Scripting Guy has two great guest posts from listener
Tome:

Tap into the PowerShell Community for Fun and Education

Learn How to Load and Use PowerShell Snap-ins



Intel vPro Expert Center Blog: PowerShell Module for Intel
vPro Technology: PowerShell Drives Beta - Part 1

 


Don Jones has released a 4 chapter PowerShell "crash course"

Manage WSUS with PowerShell




Tips


 


 


From Rob C.



$list = @"


"@


$col = $list.split("`n") |% {$_.trim()}