Powershell Kung-Fu
summary
Presentation demonstrates offensive uses of Windows PowerShell, showing effective one-liners and multi-line scripts for attackers. It covers PowerShell-based malware, creative C2 channels, and techniques for finding and exploiting poorly configured Microsoft SQL Server instances.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 6:22Phishing reconnaissance basics
- 14:57Bypassing PowerShell defenses
- 21:30Data exfiltration from LAN
- 28:29Advanced PowerShell attacks
- 36:09MSSQL and Active Directory attacks
- 41:22Hiding attacks and persistence
- 43:06Summary and Q&A
related talks
01h 40mDefending against PowerShell attacks - in theory, and in practice
49mPowerShell for Security Incident Response
25mInvestigating PowerShell Attacks
38mCatch Me If You Can. LOLBins and the Adversaries Who Abuse Them
43mMalicious Payloads vs Deep Visibility: A PowerShell Story
49mPowerShell obfuskation Techniques & How To Detect Them
40mHacker’s Paradise: Top 10 Biggest Threats When Working From Home
20mThe Power of Words: Generating PowerShell Attacks from Natural Language