Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

Hack FaaSter: Leveraging Docker and OpenFaaS for fun and offensive (security) profit

83 views

Published on

Presented at SecTalks Canberra (November 14th, 2017; Canberra, Australia)

A short presentation touching on Docker, Serverless/FaaS and OpenFaaS, some reasons why I think they're cool, and then jumping right into getting setup and playing with OpenFaaS as part of the workshop.

https://github.com/0xdevalias/hack-FaaSter

Make sure to check out the associated workshop files as well:

https://github.com/0xdevalias/hack-FaaSter/blob/master/workshop.md

Published in: Technology
  • Be the first to comment

  • Be the first to like this

Hack FaaSter: Leveraging Docker and OpenFaaS for fun and offensive (security) profit

  1. 1. @_devalias #hackFaaSter Hack FaaSter Leveraging Docker and OpenFaaS for fun and offensive (security) profit.
  2. 2. @_devalias #hackFaaSter Who am I?  Glenn ‘devalias’ Grant  http://devalias.net/  https://twitter.com/_devalias  https://github.com/0xdevalias  https://www.linkedin.com/in/glenn-devalias-grant/  Penetration Tester @ TSS  Polyglot Developer  And a few other things..  Biohacker, Bulletproof Coach, Snowboarder, Scuba, Skydiver..
  3. 3. @_devalias #hackFaaSter What is Docker?  https://www.docker.com/  Container: Lightweight ‘virtualisation’, shared kernel  Data is layered, layers are shared  Alpine Linux base image < 5mb!  DevOps: Clusters, deployment, static enviroments..  Me: Toolkit on every box with no more system clutter!  docker run --rm devalias/gobuster –h
  4. 4. @_devalias #hackFaaSter A FaaS intro to Serverless  Still uses servers, they’re just #InTheCloud™ (and somebody else’s problem)  While we’re ditching servers, let’s drop the frameworks too!  Function as a Service (FaaS)  Decompose applications into individual functions and microservices
  5. 5. @_devalias #hackFaaSter OpenFaaS  https://www.openfaas.com/  “Serverless Functions Made Simple”  Run ‘cloud functions’ locally, with the full power of Docker  faas-cli build –f https://hakt.us/funcs.yml  faas-cli deploy –f https://hakt.us/funcs.yml  echo “Hack” | faas-cli invoke TheGibson > /root/.workspace/.garbage
  6. 6. @_devalias #hackFaaSter Workshop  “I’m too young to die” (Easy Mode, recommended)  We’ll use the free online ‘Play with Docker’ environment  https://github.com/0xdevalias/hack-FaaSter  “Hey, not too rough” (Medium Mode)  Install Docker (Community Edition) locally, then play along  Mac should be straightforward, Windows is more of a challenge because Hyper-V  “Nightmare” (Hard Mode)  I don’t need no instructions! I’ll do it myself!  Docker, OpenFaaS, OpenFaaS CLI.. You’re on your own now.
  7. 7. @_devalias #hackFaaSter Upcoming Talks  CSides Canberra  “Gophers, whales and.. clouds? Oh my!” v0.2-alpha  Friday, November 17, 2017 (~6pm)  http://www.bsidesau.com.au/csides.html  BSides Wellington  “Gophers, whales and.. clouds? Oh my!”  Thursday, November 23, 2017 (3:30pm - 4:00pm)  http://bit.ly/BSidesWLG-devalias
  8. 8. @_devalias #hackFaaSter Resources  Docker  https://www.docker.com/  OpenFaaS  https://www.openfaas.com/  https://github.com/openfaas/faas  https://github.com/openfaas/faas-cli  Community Functions: https://github.com/faas-and-furious  Blogs & Talks: https://github.com/openfaas/faas/blob/master/community.md

×