Explore advanced Bash obfuscation techniques in this 26-minute conference talk from BSides Charm 2019. Delve into the world of Bashfuscator, a tool designed to generate complex Bash obfuscations. Learn about basic obfuscation methods, common obfuscation commands, and advanced techniques such as throws, CC courting, random quotes, subshells, and parameter expansions. Discover how to leverage special variables and push the boundaries of Bash obfuscation. Gain insights into the motivations behind obfuscation and its applications in cybersecurity. Conclude with an introduction to Bash Reader and explore ways to enhance obfuscation practices.
Overview
Syllabus
Intro
Who am I
Motivation
What is Bash
Bash obfuscation the wild
Metasploit
Basic obfuscation techniques
Common obfuscation command
Throws
CC courting
Normal characters
Random quotes
Multiple strings
Subshells
Subshell Comments
Special Variables
Parameter expansions
How can we make this better
Introducing Bash Reader