Automating Your Red Team Infrastructure
by elrey741
These slides:
short: http://bit.ly/red-ops add a + to preview
whoami
- Experience: IT/security for 40...I mean 4 years... :)
- Work: Secure Ideas
- Pentester
- Ops
- Developer
- Community
RED OPS
But first...
Automation
-
pentesting
- bash
- python
- ruby (metasploit)
- lua (nmap scripts)
- etc...
-
infrastructure?
- lab?
- updated kali?
- github projects?
- I don't....
Packer
Vagrant
-
from hashicorp
Vagrant is a tool for building and managing virtual machine environments in a single workflow.
Terraform
-
from hashicorp
Terraform provides an elegant user experience for operators to safely and predictably make changes to infrastructure.
-
Essentially
- providers
- provisioners
- registry (modules)
- github* (under construction)
Vagrant cont...
- Teaching
- Personal experience
- Work
Overview
-
Magic?
- packer
- vagrant
- terraform
-
Kali
- custom tools
-
Environments
- av testing
- network IDS/IPS
-
Potential
- limitless
the rabbit hole...
- top three pentesting use cases
- time
- customized vm
- fresh install
Packer
- variables.json generation script
- json template file
- scripts for provisioning
- vagrant config include for further configuration
Vagrant
Terraform
- Want to go even farther?
- Don't want to build from scratch?
- Automate home pentesting lab
- Automate C2 infrastructure
pre reqs and packer demo
- pre reqs
- Virtualbox
- packer - https://www.packer.io/downloads.html
- vagrant - https://www.vagrantup.com/downloads.html
- computer :)
- probably about 20 - 30G of storage space just to be safe
- github
- Video of auto
pre reqs and vagrant training demo
- pre reqs
- Virtualbox
- vagrant - https://www.vagrantup.com/downloads.html
- computer :)
- probably about 30 - 40G of storage space just to be safe
- github
- current slides
pre reqs and terraform demo* (will do)
- pre reqs
- Virtualbox
- vagrant - https://www.vagrantup.com/downloads.html
- terraform - https://terraform.io/downloads.html
- computer :)
- probably about 10 - 20G of storage space just to be safe
- hypervisor
- openstack (tested with devstack)
- vSphere
- github
Final Info
- Mine
- Twitter - @RonJonArod
- github - elreydetoda
- vagrant cloud - https://app.vagrantup.com/elrey741
- blog - https://elrey.casa/blog
- these slides - https://slides.com/elrey741/redops/
- Others
- Rasta Mouse
- rmikehodges
- clong
Automating_Your_Red_Team_Infrastructure
By elrey741 (Alex)
