Pentesting ChatOps

on YouTube ↗42m

" summary

Company runs pentests from self‑hosted RocketChat and GitLab with a Hubot fork (Rossbot) that compiles XML reports, posts password‑protected PDFs and syncs nmap/scan output into repo issues. Customers join chatrooms to “peek over our shoulder,” enabling real‑time questions, SMS‑style commands (nmap, hydra, rainbow crack) and a red‑blue training game with an integrated scoreboard. A 35‑person org claims reduced scope overruns, faster triage and fully automated report builds from a single chat command.

AI-written summary · about

" chapters (9)

1. 0:00Intro
2. 3:22What is Chatops?
3. 14:25XML Pentest Report Automation
4. 17:31Pentesting ChatOps(2)
5. 21:09Passive Vulnerability Scanning
6. 22:26Red/Blue Pentesting
7. 25:59But WAIT.. there's more!!!!
8. 30:27Security Consultancy as a "DevOps Shop"
9. 38:11Awards and Recognition

" related talks

• 42mPentesting ChatOpsMelanie Rieback · Codemotion Milan 2017
• 52mPentesting ChatOpsMelanie Rieback · Codemotion Amsterdam 2017
• 49mKeynote: Pentesting ChatOpsMelanie Rieback · PyData Amsterdam 2018
• 29m2014.10.29 - Security@Scale - Scott Roberts, GitHubScott Roberts · Security @Scale 2014
• 43mSecurity Kaizen for developersDr. Melanie Rieback · code.talks 2024
• 58mOpen Source Pentesting and Security Analysis Tools: the DevOps wayChristian Nils Schneider · DevOpsCon Spring 2019
• 49mUsing ChatGPT to Find Vulnerabilities & Malware in Open SourceFeross Aboukhadijeh · REFACTOR DX 2023
• 40mRobots with Pentest RecipesAbhay Bhargav · OWASP AppSec California 2018