Opening Windows (with) PowerShell
summary
Prototype PowerShell code obtains OAuth access token and calls a Velux-style REST API to list homes, bridges and blind states; APK extraction and APK decompile reveals hidden endpoints and secrets; network security config is edited to unpin certificate so a proxy/Wireshark can decrypt traffic; modified APK is re-signed and installed to capture real calls; functions around Invoke-RestMethod handle tokens and home state and produce runnable controls (demo flakiness and rate limits occur).
AI-written summary · about
chapters (8)
- 0:00Welcome
- 4:24Motivation for automation
- 9:21REST API options
- 11:48PowerShell REST calls
- 21:44Reverse engineering API secrets
- 33:13PowerShell module for Velux API
- 38:28Live demo
- 39:12Q&A
related talks
25mCreating Automation with APIs and PowerShell
49mAdvanced Network Scripting with PowerShell
01h 30mConjuring data with APIs
01h 33mA hands-on lab working
44mWindows Phone App Security For Builders And Breakers
49mPowerShell for Security Incident Response
50mAutomated Discovery Of Logical Priv. Esc. Bugs In Win10
58mPrivilege Escalation in Microsoft Azure