[PDF] Hacking with Powershell - Anciens Et Réunions

Can PowerShell be hacked?

A crucial attribute attackers discovered was that PowerShell didn't offer particularly extensive logs of its activity, plus most Windows users didn't set PowerShell to record logs at all. As a result, attackers could abuse the framework in plain sight, without a victim system flagging the activity in any way.

Can IT security staff learn PowerShell?

But there’s no reason why IT security staff can’t master enough PowerShell to start their own pen testing and begin to understand the hacker mindset. The first key point about PowerShell is that all the old scripts, .bat files, or procedures that you ran from the cmd.exe command prompt still work in the PowerShell console. That’s great news.

Can PowerShell be used in real-world attacks?

Long a point of interest for security researchers, PowerShell techniques increasingly pop up in real-world attacks. Last year, well over a third of the incidents assessed by security firm Carbon Black and its partners involved some sort of PowerShell component.

Are PowerShell attacks a long-overdue resistance?

But as network defenders catch on to Microsoft's recent release of additional PowerShell protections, the attack sequences that exploit PowerShell are finding some long-overdue resistance. A shell is an interface, often a simple command line, for interacting with an operating system.