Download to read offline
Uploaded byGlenn 'devalias' Grant
Hack FaaSter: Leveraging Docker and OpenFaaS for fun and offensive (security) profit
Presented at SecTalks Canberra (November 14th, 2017; Canberra, Australia) A short presentation touching on Docker, Serverless/FaaS and OpenFaaS, some reasons why I think they're cool, and then jumping right into getting setup and playing with OpenFaaS as part of the workshop. https://github.com/0xdevalias/hack-FaaSter Make sure to check out the associated workshop files as well: https://github.com/0xdevalias/hack-FaaSter/blob/master/workshop.md
![Getting Started with Apache Spark: Big Data Made Simple [Free Meetup]](https://cdn.slidesharecdn.com/ss_thumbnails/apachesparkgettingstarted-260203175547-8361bcc3-thumbnail.jpg?width=640&height=640&fit=bounds)
Hack FaaSter: Leveraging Docker and OpenFaaS for fun and offensive (security) profit
- 1. @_devalias #hackFaaSter Hack FaaSter LeveragingDocker and OpenFaaS for fun and offensive (security) profit.
- 2. @_devalias #hackFaaSter Who amI? Glenn ‘devalias’ Grant http://devalias.net/ https://twitter.com/_devalias https://github.com/0xdevalias https://www.linkedin.com/in/glenn-devalias-grant/ Penetration Tester @ TSS Polyglot Developer And a few other things.. Biohacker, Bulletproof Coach, Snowboarder, Scuba, Skydiver..
- 3. @_devalias #hackFaaSter What isDocker? https://www.docker.com/ Container: Lightweight ‘virtualisation’, shared kernel Data is layered, layers are shared Alpine Linux base image < 5mb! DevOps: Clusters, deployment, static enviroments.. Me: Toolkit on every box with no more system clutter! docker run --rm devalias/gobuster –h
- 4. @_devalias #hackFaaSter A FaaSintro to Serverless Still uses servers, they’re just #InTheCloud™ (and somebody else’s problem) While we’re ditching servers, let’s drop the frameworks too! Function as a Service (FaaS) Decompose applications into individual functions and microservices
- 5. @_devalias #hackFaaSter OpenFaaS https://www.openfaas.com/ “Serverless Functions Made Simple” Run ‘cloud functions’ locally, with the full power of Docker faas-cli build –f https://hakt.us/funcs.yml faas-cli deploy –f https://hakt.us/funcs.yml echo “Hack” | faas-cli invoke TheGibson > /root/.workspace/.garbage
- 6. @_devalias #hackFaaSter Workshop “I’mtoo young to die” (Easy Mode, recommended) We’ll use the free online ‘Play with Docker’ environment https://github.com/0xdevalias/hack-FaaSter “Hey, not too rough” (Medium Mode) Install Docker (Community Edition) locally, then play along Mac should be straightforward, Windows is more of a challenge because Hyper-V “Nightmare” (Hard Mode) I don’t need no instructions! I’ll do it myself! Docker, OpenFaaS, OpenFaaS CLI.. You’re on your own now.
- 7. @_devalias #hackFaaSter Upcoming Talks CSides Canberra “Gophers, whales and.. clouds? Oh my!” v0.2-alpha Friday, November 17, 2017 (~6pm) http://www.bsidesau.com.au/csides.html BSides Wellington “Gophers, whales and.. clouds? Oh my!” Thursday, November 23, 2017 (3:30pm - 4:00pm) http://bit.ly/BSidesWLG-devalias
- 8. @_devalias #hackFaaSter Resources Docker https://www.docker.com/ OpenFaaS https://www.openfaas.com/ https://github.com/openfaas/faas https://github.com/openfaas/faas-cli Community Functions: https://github.com/faas-and-furious Blogs & Talks: https://github.com/openfaas/faas/blob/master/community.md
Editor's Notes
- #4 https://en.wikipedia.org/wiki/Operating-system-level_virtualization https://www.docker.com/ https://hub.docker.com/_/alpine/ https://hub.docker.com/r/devalias/gobuster/
- #5 Definitions https://en.wikipedia.org/wiki/Serverless_computing https://en.wikipedia.org/wiki/Function_as_a_service Landscape https://aws.amazon.com/lambda/ https://cloud.google.com/functions/ https://azure.microsoft.com/en-us/services/functions/ https://medium.com/memory-leak/this-year-gartner-added-serverless-to-its-hype-cycle-of-emerging-technologies-reflecting-the-5dfe43d818f0
- #6 https://www.openfaas.com/ https://github.com/openfaas/faas https://github.com/openfaas/faas-cli Blogs, talks, etc https://github.com/openfaas/faas/blob/master/community.md Community Functions: https://github.com/faas-and-furious