Harness: Powershell Weaponization Made Easy (or at least easier)

Presented at DEF CON 23 (2015), Aug. 7, 2015, 4 p.m. (30 minutes).

The Harness toolset aims to give penetration testers and red teams the ability to pull a remote powershell interface with all the same features of the native Powershell CLI and more. Several tools and utilities have been released to solve the powershell weaponization problem, but no freely available tool give operators the full capabilities of powershell through a remote interface. We'll start the talk with a quick survey of the previous methods of weaponizing powershell, and then move into the capabilities of the Harness toolset which includes a fully interactive powershell CLI, and remote importing of modules across the wire without staging. We'll conclude with taking a look at the underlying code that makes the toolset work, and briefly discuss planned features. The Harness toolset will be released open source in conjunction with this talk.

Presenters:

• Rich Kelley - security researcher & co-founder of Gray Tier Technologies
  Rich Kelley (@RGKelley5) is a security researcher and the co-founder of Gray Tier Technologies, a small InfoSec start-up based out of Alexandria, VA. After his time in the military he held positions as a network engineer, software engineer, and penetration tester for various government agencies. He recently moved into exploit development and reverse engineering, and is pretty sure he knows less than when he started. Twitter: @RGKelley5

Links:

• https://defcon.org/html/defcon-23/dc-23-speakers.html#Kelley
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 slides/DEF CON 23 - Rich Kelley - Harness - Powershell Weaponization Made Easy - Slides.mp4
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 video/DEF CON 23 - Rich Kelley - Harness - Powershell Weaponization Made Easy - Video.mp4
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 video and slides/DEF CON 23 - Rich Kelley - Harness - Powershell Weaponization Made Easy - Video and Slides.mp4 (Video and Slides)
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 slides/DEF CON 23 - Rich Kelley - Harness - Powershell Weaponization Made Easy - Slides.srt (subtitles)
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 video and slides/DEF CON 23 - Rich Kelley - Harness - Powershell Weaponization Made Easy - Video and Slides.srt (subtitles)
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 video/DEF CON 23 - Rich Kelley - Harness - Powershell Weaponization Made Easy - Video.srt (subtitles)
• https://www.youtube.com/watch?v=sgi73boZ9Xk

Similar Presentations:

• BSidesDC 2016 / PowerShell Security: Defending the Enterprise from the Latest Attack Platform
• DeepSec 2015 „DeepSec No. 9“ / PowerShell for Penetration Testers
• PancakesCon 1 (2020) Virtual / PowerShell and Pickling