Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 58 guests online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow Powershell
EH-Net
May 24, 2013, 07:06:52 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Powershell  (Read 6108 times)
0 Members and 1 Guest are viewing this topic.
yatz
Full Member
***
Offline Offline

Posts: 222


View Profile WWW
« on: June 14, 2010, 01:28:11 PM »

Hey I was just thinking about using Powershell as a remote shell instead of the standard cmd.exe.  Has anyone done this before?  If you have, what capabilities did you use that were not available in the standard shell?

I only wonder because I was doing some SharePoint scripting using Powershell and it showed a LOT of potential inherent to the shell that otherwise would have required some kind of programming language (duh, because powershell is basically an interpreter).
Logged

"Live as though you would die tomorrow, learn as though you would live forever."

CCNA, MCSA, MCTS, Sec+, Net+, Linux+, CEH
sil
Hero Member
*****
Offline Offline

Posts: 549



View Profile WWW
« Reply #1 on: June 15, 2010, 06:18:12 AM »

"Remote shell" for a pentest? I wouldn't bother with it. In a penetration testing gig your role is using to validate the ability to get into a system. While you may make mention of installation of software in your tactical plan to your client, what purpose would it serve. If you already got into a machine, you've done your job especially if you can install software on the machine so updloading Monad (powershell) unto a machine is pointless. It's kind of like saying "I broke into a bank and once there I decided to change the camera system to show X..." Eliminate all but the first five words... "I broke into a bank" your role is done. Installing software on a machine you've pentested can potentially break something somewhere down the line especially with Windows systems where reliance on DLL files are high.
Logged

yatz
Full Member
***
Offline Offline

Posts: 222


View Profile WWW
« Reply #2 on: June 15, 2010, 08:18:54 AM »

A pentest is more than just exploiting one host my friend...

My point is more along the lines of using Powershell to easily access network resources using the added features.  Also you don't necessarily need to install it since it is required for certain server apps like Exchange 2010, and Windows Server 2008 has it as a built in feature (not to mention Server Core).

Plus, it's basically the same as running python and having the immediate interpreter at your fingertips, except it's PS rather than PY.
Logged

"Live as though you would die tomorrow, learn as though you would live forever."

CCNA, MCSA, MCTS, Sec+, Net+, Linux+, CEH
sil
Hero Member
*****
Offline Offline

Posts: 549



View Profile WWW
« Reply #3 on: June 15, 2010, 09:19:46 AM »

True indeed that pentesting is more than just one machine, but you've missed the gist of what I was trying to get at. In most instances I try to avoid leaving footprints via way of software installs and even tool usage since many tools are pretty noisy. I've found that with a minimalist set of tools one can still accomplish most tasks. E.g. using telnet + sleep as opposed to always using nmap.

In using tools already in place, you're less likely to set off alarms or get tripped up if an admin (while doing say a zero knowledge) sees you and cuts you off. I personally like to enumerate and send targeted attacks as opposed to scripted ones to confirm/validate something. This is something automation is not good at (finding discrepancies). To each their own though. I would not install software if I didn't have to especially for the sake of automating the testing.
Logged

ajohnson
Recruiters
Hero Member
*
Offline Offline

Posts: 1060


aka dynamik


View Profile WWW
« Reply #4 on: June 27, 2010, 05:53:43 PM »

It's worth noting that powershell is included in all Windows versions going forward, as well as other MS server products such as Exchange, SQL Server, etc.

Powershell is really powerful, and if it's there, I don't see any reason not to use it.

Also, if you haven't seen it, check out this module: http://code.msdn.microsoft.com/bsonposh
Logged

WIP: GCFA | www.infosiege.net | @infosiege

The day you stop learning is the day you start becoming obsolete.
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.052 seconds with 22 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.