PowerShell Secrets and Tactics

Presented at DerbyCon 6.0 Recharge (2016), Sept. 23, 2016, 4 p.m. (50 minutes).

It used to be that most people were just starting to hear about PowerShell. Over the last 3 years, this has changed dramatically. We now see Offensive and Defensive PowerShell tools, exploits specifically leveraging PowerShell and WMI, and more organizations are starting to be intentional for detection and monitoring of PowerShell scripts and commands. With this visibility, it is becoming a game of cat and mouse to leverage and detect PowerShell. In this talk, I will highlight some secrets I use to ensure my PowerShell exploits are successful and some unique tactics which will bypass common defensive controls. I will also walk you through the creation of a custom PowerShell C# DLL which you can use to compromise your target. If you want to code with me, be sure to bring a laptop with Visual Studio 2013 or later installed.

Presenters:

• Ben0xA

Similar Presentations:

• BSidesDC 2016 / PowerShell Security: Defending the Enterprise from the Latest Attack Platform
• DeepSec 2015 „DeepSec No. 9“ / PowerShell for Penetration Testers
• PancakesCon 1 (2020) Virtual / PowerShell and Pickling