Slide 1

Slide 1 text

@_devalias #hackFaaSter Hack FaaSter Leveraging Docker and OpenFaaS for fun and offensive (security) profit.

Slide 2

Slide 2 text

@_devalias #hackFaaSter Who am I? u Glenn ‘devalias’ Grant u http://devalias.net/ u https://twitter.com/_devalias u https://github.com/0xdevalias u https://www.linkedin.com/in/glenn-devalias-grant/ u Penetration Tester @ TSS u Polyglot Developer u And a few other things.. u Biohacker, Bulletproof Coach, Snowboarder, Scuba, Skydiver..

Slide 3

Slide 3 text

@_devalias #hackFaaSter What is Docker? u https://www.docker.com/ u Container: Lightweight ‘virtualisation’, shared kernel u Data is layered, layers are shared u Alpine Linux base image < 5mb! u DevOps: Clusters, deployment, static enviroments.. u Me: Toolkit on every box with no more system clutter! u docker run --rm devalias/gobuster –h

Slide 4

Slide 4 text

@_devalias #hackFaaSter A FaaS intro to Serverless u Still uses servers, they’re just #InTheCloud™ (and somebody else’s problem) u While we’re ditching servers, let’s drop the frameworks too! u Function as a Service (FaaS) u Decompose applications into individual functions and microservices

Slide 5

Slide 5 text

@_devalias #hackFaaSter OpenFaaS u https://www.openfaas.com/ u “Serverless Functions Made Simple” u Run ‘cloud functions’ locally, with the full power of Docker u faas-cli build –f https://hakt.us/funcs.yml u faas-cli deploy –f https://hakt.us/funcs.yml u echo “Hack” | faas-cli invoke TheGibson > /root/.workspace/.garbage

Slide 6

Slide 6 text

@_devalias #hackFaaSter Workshop u “I’m too young to die” (Easy Mode, recommended) u We’ll use the free online ‘Play with Docker’ environment u https://github.com/0xdevalias/hack-FaaSter u “Hey, not too rough” (Medium Mode) u Install Docker (Community Edition) locally, then play along u Mac should be straightforward, Windows is more of a challenge because Hyper-V u “Nightmare” (Hard Mode) u I don’t need no instructions! I’ll do it myself! u Docker, OpenFaaS, OpenFaaS CLI.. You’re on your own now.

Slide 7

Slide 7 text

@_devalias #hackFaaSter Upcoming Talks u CSides Canberra u “Gophers, whales and.. clouds? Oh my!” v0.2-alpha u Friday, November 17, 2017 (~6pm) u http://www.bsidesau.com.au/csides.html u BSides Wellington u “Gophers, whales and.. clouds? Oh my!” u Thursday, November 23, 2017 (3:30pm - 4:00pm) u http://bit.ly/BSidesWLG-devalias

Slide 8

Slide 8 text

@_devalias #hackFaaSter Resources u Docker u https://www.docker.com/ u OpenFaaS u https://www.openfaas.com/ u https://github.com/openfaas/faas u https://github.com/openfaas/faas-cli u Community Functions: https://github.com/faas-and-furious u Blogs & Talks: https://github.com/openfaas/faas/blob/master/community.md