Keynote: Pentesting ChatOps
summary
Claims that ChatOps makes pen testing repeatable and transparent and shows the tooling and results: self‑hosted Rocket.Chat plus a Hubot‑style bot called Rossbot invokes nmap scans, hash cracking with rainbow tables, a passive scanner and an open‑source spearphishing suite, compiles reports with pentext, and posts live updates so customers can peek over our shoulder. A red/blue gamified exercise and a 150‑target phish (30 submitted credentials) demonstrate it works and that automation plus chat visibility changes workflow and billing.
AI-written summary · about
chapters (11)
- 0:00Nonprofit security consultancy intro
- 8:16Why we built nonprofit security
- 10:46What is ChatOps
- 17:36Transparency model
- 23:38Pen testing gamification
- 30:05Automating hacking tools
- 34:27Phishing simulations tracking
- 39:06Billable hours tracking
- 42:14DevOps for operational security
- 45:20AI chatbots in security
- 47:04Awards and ventures
related talks
42mPentesting ChatOps
52mPentesting ChatOps
42mPentesting ChatOps
58mOpen Source Pentesting and Security Analysis Tools: the DevOps way
01h 01mOpen Source Pentesting and Security Analysis Tools: the DevOps way… #slideless
40mRobots with Pentest Recipes
32mPicking the Low-Hanging Fruit – Easy Pentest Wins
57mEnterprise Ethical Hacking Cloud Applications