Hack FaaSter: Leveraging Docker and OpenFaaS for fun and offensive (security) profit

Presented at SecTalks Canberra (November 14th, 2017; Canberra, Australia)

A short presentation touching on Docker, Serverless/FaaS and OpenFaaS, some reasons why I think they're cool, and then jumping right into getting setup and playing with OpenFaaS as part of the workshop.

https://github.com/0xdevalias/hack-FaaSter

Make sure to check out the associated workshop files as well:

https://github.com/0xdevalias/hack-FaaSter/blob/master/workshop.md

Transcript

1. @_devalias #hackFaaSter Hack FaaSter Leveraging Docker and OpenFaaS for fun and offensive (security) profit.
2. @_devalias #hackFaaSter Who am I? u Glenn ‘devalias’ Grant u http://devalias.net/ u https://twitter.com/_devalias u https://github.com/0xdevalias u https://www.linkedin.com/in/glenn-devalias-grant/ u Penetration Tester @ TSS u Polyglot Developer u And a few other things.. u Biohacker, Bulletproof Coach, Snowboarder, Scuba, Skydiver..
3. @_devalias #hackFaaSter What is Docker? u https://www.docker.com/ u Container: Lightweight ‘virtualisation’, shared kernel u Data is layered, layers are shared u Alpine Linux base image < 5mb! u DevOps: Clusters, deployment, static enviroments.. u Me: Toolkit on every box with no more system clutter! u docker run --rm devalias/gobuster –h
4. @_devalias #hackFaaSter A FaaS intro to Serverless u Still uses servers, they’re just #InTheCloud™ (and somebody else’s problem) u While we’re ditching servers, let’s drop the frameworks too! u Function as a Service (FaaS) u Decompose applications into individual functions and microservices
5. @_devalias #hackFaaSter OpenFaaS u https://www.openfaas.com/ u “Serverless Functions Made Simple” u Run ‘cloud functions’ locally, with the full power of Docker u faas-cli build –f https://hakt.us/funcs.yml u faas-cli deploy –f https://hakt.us/funcs.yml u echo “Hack” | faas-cli invoke TheGibson > /root/.workspace/.garbage
6. @_devalias #hackFaaSter Workshop u “I’m too young to die” (Easy Mode, recommended) u We’ll use the free online ‘Play with Docker’ environment u https://github.com/0xdevalias/hack-FaaSter u “Hey, not too rough” (Medium Mode) u Install Docker (Community Edition) locally, then play along u Mac should be straightforward, Windows is more of a challenge because Hyper-V u “Nightmare” (Hard Mode) u I don’t need no instructions! I’ll do it myself! u Docker, OpenFaaS, OpenFaaS CLI.. You’re on your own now.
7. @_devalias #hackFaaSter Upcoming Talks u CSides Canberra u “Gophers, whales and.. clouds? Oh my!” v0.2-alpha u Friday, November 17, 2017 (~6pm) u http://www.bsidesau.com.au/csides.html u BSides Wellington u “Gophers, whales and.. clouds? Oh my!” u Thursday, November 23, 2017 (3:30pm - 4:00pm) u http://bit.ly/BSidesWLG-devalias
8. @_devalias #hackFaaSter Resources u Docker u https://www.docker.com/ u OpenFaaS u https://www.openfaas.com/ u https://github.com/openfaas/faas u https://github.com/openfaas/faas-cli u Community Functions: https://github.com/faas-and-furious u Blogs & Talks: https://github.com/openfaas/faas/blob/master/community.md