PowerShell for Ethical Hackers

                                                                                                             

PowerShell For Ethical Hackers Blog Series 

Hello my hacking buddies, Finally i am back with my blog series PowerShell for Ethical Hackers. we all know what is powershell and it easies our task same like linux bash scripting. in this blog series i'll show you some useful test cases which i have performed in real life penetration testing and i am going to show you how to write powershell script from basics to advance level. So, let's Start 😊😉

Part 1: Introduction to PowerShell, why PowerShell is important for Ethical Hackers and PowerShell Framework.

Penetration Testing using PowerShell

PowerShell: PowerShell is an interactive command line shell for windows same like bash shell in       Linux. PowerShell is designed for doing automated system tasks i.e. (you can check installed USB     devices in one or multiple computers in your network), batch processing etc. it is developed in .NET   Framework.

Introduction to PowerShell

What Ethical Hacker can do using PowerShell

As a penetration tester we can perform so many awesome things using PowerShell. Suppose you got access of windows system using remote exploit, now the question is what is your aim and what’s next here PowerShell comes in the picture. You can do such things which are mentioned below.

1    1.        Recon
2.       Backdoors
3.       Incident Response
4.       Shells
5.       Exfiltration   
6.       Escalation
7.       Reverse Engineering

PowerShell Frameworks

There are some Pentesting frameworks which are publicly available on the internet which you can use for do penetration testing.

1    1.    PowerSploit
2.       Nishang
3.       PowerShell Empire
4.       Pentestly

PowerSploit: PowerSploit is a post exploitation framework for windows systems. It is comprised of the following modules. Code Execution, Script Modification, Exfiltration, AV Bypass, Persistence etc.

Nishang: Nishang also includes great stuff for post exploitation. You can perform Brute forcing on SQL server AD Server, Pivoting in Network, MITM attacks etc. One of the awesome feature Nishang has Powerpreter. Powerpreter is a script module which makes it useful in scenarios like drive-by-download, document attachments, webshells etc. where one may like to pull all the functionality in Nishang in a single file or where deployment is not easy to do. Powerpreter has persistence capabilities too

PowerShell Empire: Empire is purely PowerShell post exploitation Framework. It implements the ability of run the PowerShell agent without the need of powershell.exe

Pentestly: Pentestly is a combination of python and PowerShell Scripts and it provide a user interface from where we can perform such tasks.

Thats all for this Part. Stay Tuned for next post. 😊😉

#HappyHacking #Blogger #Security #Learner