Menu > Articles de la revue de presse : - l'ensemble [tous | francophone] - par mots clé [tous] - par site [tous] - le tagwall [voir] - Top bi-hebdo de la revue de presse [Voir]

---

S'abonner au fil RSS global de la revue de presse

---

Présentation : I ve been a huge PowerShell fan ever since I first discovered it as a Systems Administrator many years ago. It s an incredibly easy to use, intuitive and powerful language and helped me efficiently address a lot of tasks that came across my plate. Unfortunately, the other Systems Administrators that I worked with were less keen to pick it up. Years of pointing and clicking had made them nervous about using a command line. For different reasons, the Information Security community is in a similar state. PowerShell is an incredible platform for both offense and defense. There is a lot of cutting edge work being done by members of the PowerShell community, but the Information Security community at large is unaware of a lot of their contributions. This may stem from a lack of interest in Windows development or fear of having to learn yet another scripting language. No matter the reason, a lot of security professionals are missing out on some great work. Enter PSAttack --------------- To help make using offensive PowerShell easier, I ve created PSAttack. PSAttack is a custom made console that is designed to emulate PowerShell and enhance it. Built into PSAttack are over 110 offensive PowerShell commands representing some of the greatest work going on in the offensive PowerShell community. This selection of tools runs the entire gamut of a security assessment including Reconnaissance, Privilege Escalation, Backdoors and Data Exfiltration. It also includes a custom command called get-attack which helps to serve as an attack search engine. It takes a word or phrase and returns a list of commands and their descriptions that match what you re looking for. Get-Attack returning a list of commands related to the word Password All of this is bundled into a single executable that runs on anything from a fresh install of Windows 7 all the way up to a fully patched version of Windows 10. There s no installer, just double click and start attacking. Not Just for the Lab -------------------- In creating PSAttack, I didn t want to create a tool that was only used in a lab environment. I wanted to create something that was useful and could find its way into a penetration tester s bag of tricks. To this end, PSAttack is designed to evade antivirus and other hurdles. The various scripts and payloads that provide the commands are encrypted before being embedded into the executable. When PSAttack is run, these scripts are decrypted directly into memory, so the plain text payloads never touch the hard drive. This helps avoid detection by most antivirus solutions. PSAttack is also written using native .NET functions and objects to process PowerShell code, it does not rely on powershell.exe . Because .NET is such an important part of Windows, this means that it s very difficult for an organization to prevent PSAttack from accessing the functionality it needs to run. Getting PSAttack ----------------- PSAttack is available on our Github account. You can either compile the code yourself using Visual Studio or you can download pre-compiled binaries from the releases tab. Acknowledgments --------------- PSAttack relies on a lot of tools to make itself effective and it s important to make sure that the authors of those tools get the attention they deserve. Scripts from the following tools and frameworks are incorporated into PSAttack. These tools represent some of the best work being done in offensive PowerShell today PowerSploit Nishang Inveigh PowerCat






Les derniers articles du site "Blog" :

- Malware Trends - Q1 2016
- Simplified DDoS Testing at Scale
- BreakingPoint Captures Real-World 2015 Application Trends
- ATI Minecraft
- Benchmarking Open Source SDN Controllers Are They Ready for Carrier-Grade Services
- The End of Days is Here for Network Blind Spots
- Ixia ATI Research Center Finds Multiple Security Vulnerabilities in IBM Tivoli Storage Manager FastBack
- Introducing PSAttack
- Mobile World Congress 2016 Recap
- Ixia Smarter Security at RSA 2016

---

S'abonner au fil RSS global de la revue de presse

---