Episode 129 – Security Ninja Dave Kennedy

26 10 2010
A Podcast about Windows PowerShell.
Listen:

In This Episode

Tonight on the PowerScripting Podcast, we talk to security ninja Dave Kennedy about ethical hacking using PowerShell.

News

Execute commands and scripts from anywhere including the office and remote locations, as well as from a Web browser or smart phone with PowerGUI Pro from Quest Software. With the MobileShell feature, administrators can quickly run commands to troubleshoot problems or make changes, even when away from your desk! This gives teams more flexibility to work remotely while traveling, and to leverage admins from other offices in case of an emergency.

·         Execute queries remotely to determine if services or processes are running

·         Restart services, processes, or entire servers

·         Check mailbox settings

·         Unlock user accounts

·         Reset passwords

·         Run custom scripts

Visit quest.com/powerguipro and see why PowerShell and Quest PowerGUI are the ultimate Windows management tools.

Interview

Our interview is brought to you by SAPIEN Technologies, makers of PrimalScript and PrimalForms.

Links:

Chatroom Buzz

  • <AaronHoover> ## favorite linux distros?
    • Backtrack/ubuntu
  • <toenuff> ## Scripting language/Programming language history
    • Python
  • <c0gito_ergo_sum> ## how about how SET came to be?
  • <c0gito_ergo_sum> ### what did you develope for backtrack?
  • <stuwee-1> Q: how simular do you see python and psh?
  • <infosec208> ## this sounds like a n00b question probably, but has dave used python 3 or stuck with python 2.x? i’ve struggled with the ctypes he mentioned with 3.x.
  • <stuwee-1> Q: do you use psh automation scripts to do system tests?
  • <AaronHoover> ## would you say most networks are turtle shells?
  • <AaronHoover> ## thoughts on Certified Ethical Hacker cert?
  • <c0gito_ergo_sum> ### great description on what the tool is and some backround on it but did you just say one day “hey i want to be able to do something like this automaticaly” or was it someone who wanted the tool?
  • <PenPerk> CISSP = if you didn’t know how to secure a machine before the cert.. you still don’t after..
  • <AaronHoover> ## best ways to sell security to decision makers? Opportunity cost?  Disaster scenarios?
  • <infosec208> ## how has dave used powershell in a test? i have not listened to his defcon talk. i can see where powershell can be handy since it’s almost on every server. like wmi via powershell?
  • <stuwee-1> Q: is a recorded session or powerpoint slides available for posting in the notes from his defcon session
  • <toenuff> ## Have you looked at attacking winrm or did you play with remoting at all?
  • <Toshana> ##By a weak SA password are describing a brute force attack on the SA, to the SMO?
  • <AaronHoover> ## how often do new security tools come out? Or are there more updates to existing tools?
  • <stuwee-1> Q: How often is he using psh for testing?
  • <phat32> ## Q what resouces has Dave used to learn more about powershell scripting and how to use it?
  • <AaronHoover-1> ## how ‘powerful’ is PS compared to linux/bash?
  • <toenuff> ## What did you not like in PowerShell when learning it?
  • <PenPerk> ## What would you do to secure powershell from people like you?
  • <toenuff> ## He’s mentioned execution restriction policy twice… what makes them so weak?
  • <phat32> but flash can’t see through….walls

Hero – Superman

Resources

This segment brought to you by ServerFault.com


Tips

  • From Rob C.
    • $list = @”<insert list>“@$col = $list.split(“`n”) |% {$_.trim()}




Up Next: Security Ninja David Kennedy!

19 10 2010

We’re excited to have David Kennedy (@dave_rel1k) on this show this Thursday 10/21 @ 9:30 pm edt. In the PowerShell world, David would be best known by his recent DefCon session where he introduced our favorite scripting shell to the hackers and suits gathered at this well-known security conference.

Come join us for the live chat and pitch your own questions to our guest! As always, you can find us Thursday night at the PowerScripting Podcast Ustream channel!

Here’s a bit about David:

David Kennedy is a security ninja that likes to write code, break things, and develop exploits when he has spare time. Heavily involved with BackTrack and the Social-Engineer Framework, David continues (and strives) to contribute to a variety of open-source projects. David had the privilege in speaking at some of the nations largest conferences on a number of occasions including BlackHat, Defcon and Shmoocon. David is the creator of the Social-Engineer Toolkit (SET), Fast-Track, modules/attacks for Metasploit, and has (responsibly) released a number of public exploits, including attacks that affect some of the largest software vendors in the world. David heavily co-authored the Metasploit Unleashed course available online and has a number of security related white-papers in the field of exploitation.





Episode 128 – Kirk Munro from Quest on the 2010 PowerPack Challenge

14 10 2010
A Podcast about Windows PowerShell.
Listen:

In This Episode

Tonight on the PowerScripting Podcast, we talk to Kirk Munro from Quest Software about PowerGUI Pro and the 2010 PowerPack Challenge! 

News

Execute commands and scripts from anywhere including the office and remote locations, as well as from a Web browser or smart phone with PowerGUI Pro from Quest Software. With the MobileShell feature, administrators can quickly run commands to troubleshoot problems or make changes, even when away from your desk! This gives teams more flexibility to work remotely while traveling, and to leverage admins from other offices in case of an emergency.

·         Execute queries remotely to determine if services or processes are running

·         Restart services, processes, or entire servers

·         Check mailbox settings

·         Unlock user accounts

·         Reset passwords

·         Run custom scripts

Visit quest.com/powerguipro and see why PowerShell and Quest PowerGUI are the ultimate Windows management tools.

 

Interview

Our interview is brought to you by SAPIEN Technologies, makers of PrimalScript and PrimalForms.

Links:

Chatroom Buzz

  • <cruz_daniel> Can the version control features in PowerGUI Pro help keep a consistent scripting environment from multiple places? Home, Work, Laptop etc.

Hero – Taskmaster

Resources

This segment brought to you by ServerFault.com


Tips

  • Carl writes to the podcast:
    • for (;;){Sleep -s 5; netstat -an | ss “TIME_WAIT” | ss “:443” | mo -line}
  • Aaron H writes to the podcast:
    • Use Start-Transcript in your profile and have it write to a network share with your username, date, etc. in the filename.
    • Use Write-Verbose to comment a script
    • Grab a user logged on by grabbing the username of the explorer.exe process.
  • Greg reminds us that both the forward and backwards slash will work as path separators
  • Gregg-with-two-G’s says to go to SQL Saturday!
  • Ken says:
    • You can find lots of goodies in Twitter, especially by following Hal & Jon, as well as @alexandair/powershellmvp
    • get-help * | %{get-help $_.name -full >”c:\posh\$($_.name).txt”}
  • Jan has some tips for how to create graphs using visifire and PowerShell
Contest

Thanks to everyone who entered! Congratulations to our winners who receive a copy of Lee Holmes PowerShell Cookbook, 2nd. Ed.! The winners are:

  • Bud P.
  • Aaron H
  • Ken M.
  • Carl P.




Episode 127 – Matt Royer From Intel on vPro PowerShell Support

5 10 2010
A Podcast about Windows PowerShell.
Listen:

In This Episode

Tonight on the PowerScripting Podcast, we have Matt Royer from Intel!

News

Execute commands and scripts from anywhere including the office and remote locations, as well as from a Web browser or smart phone with PowerGUI Pro from Quest Software. With the MobileShell feature, administrators can quickly run commands to troubleshoot problems or make changes, even when away from your desk! This gives teams more flexibility to work remotely while traveling, and to leverage admins from other offices in case of an emergency.

·         Execute queries remotely to determine if services or processes are running

·         Restart services, processes, or entire servers

·         Check mailbox settings

·         Unlock user accounts

·         Reset passwords

·         Run custom scripts

Visit quest.com/powerguipro and see why PowerShell and Quest PowerGUI are the ultimate Windows management tools.

Interview

Our interview is brought to you by SAPIEN Technologies, makers of PrimalScript and PrimalForms.

Links:

Hero – Batman

Resources

This segment brought to you by ServerFault.com

Contest

If you would like to be entered to win a copy of Lee Holmes’ PowerShell Cookbook, 2nd Ed., all you have to do is send in your PowerShell tips! We want to hear what YOU think is cool, or what you have in your profile, or some of your favorite one-liners! Send in your entries to feedback@powerscripting.net, and tell a friend! We have FIVE copies to give away. Contest ends October 7th, so send in your entry today!





Up Next: Matt Royer from Intel!

28 09 2010

We are extremely happy to welcome Matt from Intel to talk about their new Intel Core vPro Processor module. Click through to the blog post to read up on the gory details, but the short version is this: the vPro chipset has an embedded web-services server that shares your onboard NIC and allows you to manage the hardware much like you can with the baseboard management controllers (BMC) in server-class systems. That’s old news. The new news is that Intel released a PowerShell module that helps you to automate your vPro chips, and Matt will tell us all about it!

Be sure to join the live stream this Thursday at 9:30PM EDT and interact live with us in the chat room. If you can’t make it to the live show, you can catch the recorded show next Monday.





Contest Starts Now! Win a Free PowerShell Book!

28 09 2010

Well, technically, it started last Thursday, but there’s still plenty of time to win! In case you missed the live show, or haven’t listened to the last recorded episode, here’s who/what/where/when/why:

If you would like to be entered to win a copy of Lee Holmes’ PowerShell Cookbook, 2nd Ed., all you have to do is send in your PowerShell tips! We want to hear what YOU think is cool, or what you have in your profile, or some of your favorite one-liners! Send in your entries to feedback@powerscripting.net, and tell a friend! We have FIVE copies to give away. Contest ends September 30th, or October 7th, depending on our mood and the wind speed when we next record the show.

P.S. Thanks to @OreillyMedia for the books, tell ‘em we sent ya!





Episode 126 – Just Hal and Jon

26 09 2010
A Podcast about Windows PowerShell.
Listen:

In This Episode

Tonight on the PowerScripting Podcast, we have tips and resources!

News

Execute commands and scripts from anywhere including the office and remote locations, as well as from a Web browser or smart phone with PowerGUI Pro from Quest Software. With the MobileShell feature, administrators can quickly run commands to troubleshoot problems or make changes, even when away from your desk! This gives teams more flexibility to work remotely while traveling, and to leverage admins from other offices in case of an emergency.
· Execute queries remotely to determine if services or processes are running
· Restart services, processes, or entire servers
· Check mailbox settings
· Unlock user accounts
· Reset passwords
· Run custom scripts
Visit quest.com/powerguipro and see why PowerShell and Quest PowerGUI are the ultimate Windows management tools.

Resources

This segment brought to you by ServerFault.com

Tips

  • Tab expansion with #
  • Forcing a collection @(script block)
  • Hal talks about using SVN to keep track of your scripts with the web service Unfuddle.com and TortiseSVN
Contest
If you would like to be entered to win a copy of Lee Holmes’ PowerShell Cookbook, 2nd Ed., all you have to do is send in your PowerShell tips! We want to hear what YOU think is cool, or what you have in your profile, or some of your favorite one-liners! Send in your entries to feedback@powerscripting.net, and tell a friend! We have FIVE copies to give away. Contest ends September 30th, or October 7th, depending on our mood and the wind speed when we next record the show.




Up Next: Exchange with MVP Michael Smith and More!

22 09 2010

This Thursday (9/23/2010), we are happy to have Exchange MVP Michael B. Smith (blog) on the show! Michael has a long history as an Exchange consultant and he will be sharing what he knows with lots of PowerShell thrown in.

Also on tap are tips and resources as usual!

Please join us on the live stream to join in the conversation!





No show this week

16 09 2010

We have to skip again this week but we’ll be back next week with some Exchange goodness so please stay tuned!





Episode 125 – Cooking Up Some PowerShell with Lee Holmes

13 09 2010

A Podcast about Windows PowerShell.
Listen:

In This Episode

Tonight on the PowerScripting Podcast we talk to Lee Holmes from the PowerShell team!

News

Execute commands and scripts from anywhere including the office and remote locations, as well as from a Web browser or smart phone with PowerGUI Pro from Quest Software. With the MobileShell feature, administrators can quickly run commands to troubleshoot problems or make changes, even when away from your desk! This gives teams more flexibility to work remotely while traveling, and to leverage admins from other offices in case of an emergency.

·         Execute queries remotely to determine if services or processes are running

·         Restart services, processes, or entire servers

·         Check mailbox settings

·         Unlock user accounts

·         Reset passwords

·         Run custom scripts

Visit quest.com/powerguipro and see why PowerShell and Quest PowerGUI are the ultimate Windows management tools.

Interview

This segment is brought to you by SAPIEN Technologies.

Links

Notable Comments from the Chatroom

<SQLvariant-1> ##Right now we are seeing a lot of Connect items for SQL Server being closed as ‘fixed in next version’.  Are any members of the PowerShell team working with the SQL folks in the various areas that would benefit from better PowerShell support like SSIS

<SQLvariant-1> ##Good Point.  What are MSFT thoughts on how to make scheduling PoSh scripts a lot easier for everyone else (it’s simple for me, just schedule with SQL Agent)

<SQLvariant-1> ##Lee how did you pick what to include in the book.  Did you have some recipies that you had to cut from the book?
<Jaykul> ##How excited are you that all your cookbook scripts are about to go up on PoshCode.org?

<Jaykul> you can tell him you heard a rumor I got permission 😉

<SQLvariant-1> ## I love the concept of Invoke-SQLCommand.ps1 but I work in an all Office 2010 environment and it doesn’t seem to work with Excel.  Ist there a easy fix for that?
<Jaykul> ## Are there any of your scripts which you think really ought to be built-in?

 

Resources

This segment brought to you by ServerFault.com

Tips








Design a site like this with WordPress.com
Get started