Pentesting ChatOps
summary
Describes applying ChatOps to penetration testing and reports concrete results: a self‑hosted chat hub that launches scans, spearphishing runs and password cracking, an automated reporting pipeline that turns scoped XML into PDFs and invoices, and a gamified red/blue exercise that tracked points across about a dozen developers. Uses RocketChat, Hubot, GitLab and role based access control, builds a pentext report automation system and pen-test gamification with a scoreboard, all running in production with real customers.
AI-written summary · about
chapters (16)
- 0:00Introduction and thanks
- 3:55Why we use Rocket.Chat
- 5:41What is ChatOps?
- 10:19Discovering ChatOps at DevOps Days
- 11:01Introducing Ross Bot and commands
- 15:00Automating pen test reporting
- 20:17Role-based access control
- 22:47Integrating Kanboard and GitLab
- 27:09Automating project setup with email
- 30:19Red-blue pen testing with gamification
- 33:10Expanding ChatOps with tools
- 37:03Radically Open Security as a DevOps shop
- 38:08Tracking hours with Ross Bot Charge
- 39:53Logging and debugging in ChatOps
- 40:57Awards and company impact
- 41:59Q&A
