A Poor Man's Pentest: Automating the Manual - BsidesDE 2019

If you would like to support me, please like, comment & subscribe, and check me out on Patreon: / johnhammond010
E-mail: [e-mail]
PayPal: paypal.me/johnhammond010
GitHub: github.com/JohnHammond
Site: www.johnhammond.org
Twitter: / _johnhammond

[@_JohnHammond]

View the original on BsidesDE's channel, and check out their other talks! kzbin.info/www/bejne/rWbUf5Wjpqd1mLs

[@sickthotsonmymind2299]

Whew, working your way up brother. You're a proper example for all the youngsters

[@_JohnHammond]

@@sickthotsonmymind2299 Thanks so much! Doing the best I can!

[@jobsphil9553]

I joined discord channel. but I can not load messages . help me

[@_JohnHammond]

@@jobsphil9553 Have you done the verification CAPTCHA that the bot sent you in a DM?

[@kumarniloy3893]

Probably the first time John remembered his IP

[@gtdt5666]

:'D

[@aidancollins1591]

That was a hard crowd lol

[@deity6119]

when you compare his talk to some of the actually talented talkers at defcon he just sounds stupid lol

[@aidancollins1591]

@@deity6119 Defcon? My impression is that Defcon has turned into a huge advertising convention with the talks centered around showcasing hacking products. It's hard to find a good talk post-2015. You're better off checking out smaller conventions. This talk isn't groundbreaking or anything, it's not unveiling new research or a vulnerability, but it's perfectly fine for what it is. Showcasing what you're able to do with limited funds.

[@deity6119]

@@aidancollins1591 Old defcon was way better for sure. But I dunno I just don't think he's a very engaging speaker

[@DT-hb3zu]

I FOUND IT! Do you know how frustrating it is to search "John Hammon presentation", and get nothing but Jurassic Park clips?!

[@sechvnnull1524]

Can't thank you enough for these videos and the walk throughs you do. It literally is inspiring and motivating and gives me goals to shoot for! I started out really late in life and am working towards a degree but you really can't put a price on the content you continue to share. Its awesome stuff!!

[@_JohnHammond]

Very happy to hear that, appreciate all the kind words! Thank you so much and thanks for watching!

[@barakcobrama1703]

i use kali linux is ubunto better?? does anyone know???

[@mustafaismail5773]

That was amazing ideas, you gave me a lot of information and Techniques to continue on this path

[@sirw369]

Just watching this now, but super informative and useful if you’re into pen-testing. As always John, great presentation. Hope to catch you at your next one!

[@ankitkumarjat9886]

It's a very good automation resource.Thanks john

[@picious]

Once more, thank you !

[@TheViranga]

Great stuff. Very helpful and informative. Thanks!

[@_JohnHammond]

Thank you for watching!

[@xfaraday2433]

Ayyy my boy John rising up and doing talks now! Nice

[@123ezekiel456]

John, very cool talk. Enjoyed it so much!

[@_JohnHammond]

Thank you! It was a lot of fun to do. On to the next one!

[@simonb8988]

Great video!

[@bigtymer4862]

Great talk John! Brilliant!

[@_JohnHammond]

It's a cheesy thing, but thank you so much!

[@minibit0103]

Totally could see you becoming a professor. Very cool presentation 👏

[@runnerc]

Great job man! Very helpfull!

[@glennbloemhof3194]

@John Hammond do you have any idea how to make the stabilize_shell.sh work inside reverse shell using something like tmux? Nice Video btw! love your content!

[@thecaretaker0007]

Such a great video, now i wanna make this on my own!

[@Waarzown]

Usually I designate a specific terminal for callbacks. If you use something similar, you can set "stty raw -echo" in that window ahead of time, and not need to background the callback in order to set it.

[@anujkumarpatel2686]

you have inspire me alot

[@rodriquh]

Great talk John! They definitely needed a mic for the crowd for their questions. You’re a top notch instructor, you can tell by the way you throw in questions to keep engagement up. It seems like these guys either weren’t tracking or the concepts were way over their heads. I love the thought you put into this, but don’t you worry about creating script kiddies? Just curious. Again, great talk John, I love following your channel and seeing all the good stuff you put out there to allow people to hack their brains and change the way people look at things. Thanks for all you do brother!

[@_JohnHammond]

Hey Henry, thanks for all the kind words! Haha, it has been a few months since I have on podium instructing, but it's fun, I miss it a bit :) I am not too concerned with script kiddies -- they'll do their thing, but they won't improve :P Thanks so much, and thanks for watching!

[@RohanOnBike]

Cool stuff as always🤘

[@_JohnHammond]

Thank you for watching!

[@Joshua1_7sc]

That was awesome

[@brandanderstine677]

Great job dude

[@_JohnHammond]

Thank you so much!

[@mrjamesprince]

wow, how did i miss this

[@lordtony8276]

Any idea how to stabilize a shell when you are attacking from a windows machine? Powershell and CMD don't like it when you CTRL + Z. It makes the system lock up or something. Even when I use a kali linux docker instance, I am still running through Powershell so I can't seem to background the revshell.

[@NickBouwhuis]

Great talk! Love it! Too bad they added a rather aggressive noise gate.

[@_JohnHammond]

Thanks so much! Yeah it's a little spotty when I am speaking versus not speaking, ah well. Thanks for watching!

[@koloxd3]

Love IT

[@DDBAA24]

This was a revealing video. Only been watching you a few months , you know you love your "cheezy" 🧀KZbin channel lol. Respect though, had a feeling you had military background .

[@S1lenc31991]

As an addition to your "missing characters" problem - you could iterate over an string doing a very short delay after each keystroke to make sure you get all chars right :)

[@S1lenc31991]

Oh, and maybe look up DBUS messages, Guake is scriptable by that

[@v01dspac38]

volume = volume++

[@puppe1977]

48:34 shouldn't the keyup/keydown for Tab be in the reverse order? Great talk! It's in the correct order in your git repo (in functions.sh) so maybe just update your slides.

[@Dontfkwithme69]

I hope one day i get a chance to attend your workshop :(

[@ajaykumark107]

what is the use of xterm command ? Why do we use it here in the context?

[@damienkali]

great demo, would be good if you shared your final functions.sh somewhere ;) - was a tough crowd to work with, only feedback I can suggest, is have someone with a spare mic to pass to people when asking questions, (or if you can repeat their question back so we can hear what is going on)

[@_JohnHammond]

Thanks so much! Is the final function.sh not in the GitHub repo? I can see it there. I should definitely get in the habit of repeating questions. Thanks for all the kind words and thanks for watching!

[@damienkali]

@@_JohnHammond Pleasure to give feedback, I found your channel 2 days ago & literally going through each video now non stop. I completed (with your help) all on overthewire, have you started Krypton yet? if not, I would love to see your way of doing the challenges. I forgot to check the github repo & my bad I didnt even know you had a link, can you post it here? tks (feel free to check out some of my videos) :)

[@_JohnHammond]

@@damienkali Oh that is excellent, thank you! I have gone through a bit of Krypton, but you are right that I have not shared any videos on it! I will add it my list for sure and can hopefully get that out within the month. Github repo is here: github.com/JohnHammond/poor-mans-pentest And I took a look at your channel -- subscribed! :D

[@arinugraha635]

when i enter stty raw -echo my terminal like freeze cann't response. what's wrong ?

[@highvisibilityraincoat]

Miffed I wasn’t into security when this happened bc i’m like 30 minutes away.

[@nabinsademba]

is ctf challenge over?

[@_JohnHammond]

Yes, sorry -- I am hoping to bring the event to more conferences, so I am waiting until the next one to bring it back up again.

[@p4nz9r60]

Hi, have you thought about using the tmux instead of xte/terminator/guake?

[@_JohnHammond]

I have, yes, I used tmux for some time-- especially when I was tinkering with Arch. Admittedly I have gone back to Ubuntu -- too many idiosyncrasies added up haha.

[@tsurumaruwordpress]

I was wondering if this would be possible, substituting tmux for guake. Should be, right?

[@p4nz9r60]

@@tsurumaruwordpress 'tmux send-keys -t paneID -l some text \; send-keys -t paneID Enter' will send 'some text ' to the pane 'paneID', so you probably won't need xte at all, plus it could be used on macOS as well.

[@dnperfors]

P4nz9R mostly that should work, except for the script to start the reverse shell where you want to switch to your browser... but yeah, it would be worth a try :)

[@_JohnHammond]

@@tsurumaruwordpress I think that's a fine idea. Admittedly, with the "Alt Tab" functionality, we really don't even need Guake. We can automate shifting the focus as needed. Tmux might need some other key strokes to close a current pane, or switch a new one -- however you would like to implement it.

[@jeszczewiecejmichala]

You record it with a terrible hair dryer (calculator;)) Super presentation - From Poland

[@nabinsademba]

why cant i join the discord?

[@_JohnHammond]

What is preventing you?

[@pauloelienay1662]

Why use Ubuntu (who sells your data) if you can use Debian (if you like stability and the Ubuntu package manager), Fedora (what I used for a long time, really good IMO) or Arch (rolling release, full control over your machine etc)

[@thegripmaster666]

Do give us some reference for your claim that Ubuntu sells your data.

[@bhagyalakshmi1053]

Kail linux ram

[@bhagyalakshmi1053]

Chg pt explain

[@ctrlcapsswap966]

someone show this man at least i3