Jordan Borean

Jordan Borean

@jborean.bsky.social

264 followers58 following385 posts

Jordan Borean
@jborean.bsky.social

It's been a long time coming but PSWSMan v3 for #PowerShell has been released www.powershellgallery.com/packages/PSW.... This is a major upgrade that moves away from the C omi library to a C# WSMan stack. No more root required, better Enter-PSSession experience, and lots more features enabled.

powershellgallery.comPSWSMan 3.0.0Cross platform module that implements the WSMan connection plugin for remoting.`nSee https://github.com/jborean93/PSWSMan for more info
Jordan Borean
@jborean.bsky.social

Big shout out to @devolutions.net for sspi-rs github.com/devolutions/... which PSWSMan ships with and can optionally use. It provides a consistent Kerberos/NTLM stack across the various platforms and have been very quick to fix up any bugs I've encountered when integrating it.

github.comGitHub - Devolutions/sspi-rs: A Rust implementation of the Security Support Provider Interface (SSPI) APIA Rust implementation of the Security Support Provider Interface (SSPI) API - Devolutions/sspi-rs

Jordan Borean reposted

Jake Hildreth
@dotdot.horse

I just published my first article on the Semperis blog! It's about an interesting persistence method I'm calling Zombie Certificates: certificates that look revoked but can still be used for authentication! jakehildreth.github.io/blog/2026/10...

jakehildreth.github.ioBattling Zombie Certificates: The Persistent Risk Lurking in AD CSDo you feel that chill in the air? Have you seen the darkness descending upon the land? Are you already tired of ham-fisted attempts to make cybersecurity spookier than it really is?
Jordan Borean
@jborean.bsky.social

Just had a play around tonight and it's a no. There's a few smaller issues that look to be trivial but the biggest blocker is the krb5.conf parser which heavily relies on reflection. Most likely more on other platforms plus adding a net8.0 target so it can mark itself as AOT compatible

Jordan Borean
@jborean.bsky.social

@syfuhs.net I'm once again looking at FAST/armouring support from Linux and one of the biggest hiccups is the lack of a privileged broker to protect the machine keytab armouring the users TGT. What are the requirements for a principal that can be used for armouring, e.g. specific objectClass, SPN?

Jordan Borean
@jborean.bsky.social

I'm wondering if it is possible to create a single use principal specifically for armouring purposes so that even if their keytab is readable by users on the Linux host, they won't be able to do anything with that keytab aside from using it for amouring.

Jordan Borean
@jborean.bsky.social

Not sure if it’s related to winget being run as an msix packaged application like how PowerShell can’t run the Appx cmdlets if it was installed as an msix package. Also just wanted to say I appreciate those blog posts you’ve been doing on MSIX!

Jordan Borean reposted

nohwnd
@jakubjares.com

Delivered a good talk on #pspester mocking internals, souurce code soon thanks, for the photos. Come join the Pester follow along tomorrow, it is called advanced, but is teaching good mix of stuff. #psconf #psconfeu #powershell I

Jordan Borean reposted

Marc-André Moreau
@awakecoding.com

New blog post series! 📰 Everything wrong with MSIX, starting with how it cannot be used in a system context, such as system services. This affects WinGet, PowerShell, and a lot of other software 👇💻 awakecoding.com/posts/everyt...

awakecoding.comEverything Wrong with MSIX: No System ContextPowerShell's MSI deprecation exposes the problem with treating MSIX like a better MSI: user-registered packages can disappear from SYSTEM, breaking services, scheduled tasks, remoting, and automation.

Jordan Borean reposted

Steve Syfuhs
@syfuhs.net

Against my better judgement I decided to post the code for the directory service last night. github.com/SteveSyfuhs/...

github.comGitHub - SteveSyfuhs/Directory.NETContribute to SteveSyfuhs/Directory.NET development by creating an account on GitHub.
Steve Syfuhs@syfuhs.net

As a general rule, my philosophy on new technology is broadly summed up as: no. Slightly less summed as: hellll no. I tend to be fairly conservative on the hot new whatever, and I'm usually against bandwagons. [Ed note: Steve works on 30-year-old auth protocols, of course he's like this.]

Jordan Borean reposted

trackd
@trackd.x64.se

New release of the #PowerShell module `TextMate` (0.2.1) added a builtin pager and partial ALC. supports search highlighting and sixel images. Accessible via the `-Page` parameter or `Out-Page` cmdlet. github.com/trackd/TextM...

Jordan Borean
@jborean.bsky.social

@syfuhs.net is there some configuration or API flag to set somewhere to tell SSPI to use Kerberos User to User from the initiator side? I'm trying to setup a test CredSSP acceptor for a WinRM server and Windows uses U2U but I'm curious how it does that and whether CredSSP itself just forces it.

Jordan Borean
@jborean.bsky.social

Hmm I traced InitializeSecurityContextW and it looks like maybe it's ISC_REQ_USE_SESSION_KEY and CredSSP just always sets that? Can you think of a reason why CredSSP would want to use U2U here, what are the advantages of doing so?

Jordan Borean reposted

mdgrs
@mdgrs.bsky.social

Published a new module called AvaloniaUIShell, (the world's first?) cross-platform desktop GUI framework for PowerShell. github.com/mdgrs-mei/Av... It's using the same mechanism as WinUIShell and takes care of all threading and non-blocking UI operations. #PowerShell

github.comGitHub - mdgrs-mei/AvaloniaUIShell: Cross-platform Desktop GUI framework for PowerShell powered by Avalonia UI.Cross-platform Desktop GUI framework for PowerShell powered by Avalonia UI. - mdgrs-mei/AvaloniaUIShell
Jordan Borean
@jborean.bsky.social

At work we need to publish a PowerShell module but didn't want to deal with PSGallery tokens and more permissions we need to audit over time. I've tried out GitHub Container/OCI and Nuget feeds as well as Azure Artifacts. github.com/jborean93/Po... TLDR: Use Azure Artifacts.

github.comGitHub - jborean93/PowerShell-PublishTest: Testing for publishing a PowerShell module to different repositoriesTesting for publishing a PowerShell module to different repositories - jborean93/PowerShell-PublishTest
Jordan Borean
@jborean.bsky.social

GitHub Nuget would be great but it doesn't allow anonymous access so not good for end users wanting to install our module. GitHub OCI would be a nice option but PSResourceGet cannot publish or install from any OCI based repo that isn't ACR or MAR. I'm hoping to submit a few PRs to fix that though.

Jordan Borean
@jborean.bsky.social

Over the past couple of months I've grown increasingly concerned around the future of PowerShell. It seems like the days of community involvement are getting less frequent so I wrote github.com/PowerShell/P.... Would love anyone else to share their thoughts if they wish to.

github.comConcerns around PowerShell 7 and community involvement · PowerShell PowerShell · Discussion #26844I’d like to raise some concerns regarding the recent progress and communication around PowerShell and related projects. I want to emphasize that I have a great deal of respect for the team and the ...

Jordan Borean reposted

mdgrs
@mdgrs.bsky.social

Cooking a major update to WinUIShell. I've just finished fixing all the build errors caused by my C# source generator. Thanks to that, all WinUI3 controls will be supported in the next release. Yes, all of them🎉 This example is one of my favorites, ContentDialog. github.com/mdgrs-mei/Wi...

Jordan Borean
@jborean.bsky.social

A bit disappointed that Microsoft has stopped providing diff pdf's of their various protocol docs. For example MS-SMB2 stopped after 79.0 learn.microsoft.com/en-us/opensp.... It made it so much easier to see what was changed rather than reading "Major" for adding the latest Windows version number.

learn.microsoft.com[MS-SMB2]: Server Message Block (SMB) Protocol Versions 2 and 3Specifies the Server Message Block (SMB) Protocol Versions 2 and 3, which support the sharing of file and print resources
Jordan Borean
@jborean.bsky.social

Does anyone know of an up to date article that talks through the content of the Kerberos AS and TGS req/resp messages. I can read through the RFCs, MS-KILE, and inspect the network traffic but I'm hoping for a nice up to date guide on the various PAData values and what/when they are used/required.

Jordan Borean
@jborean.bsky.social

Well that was short lived. Turns out no changes are needed in PowerShell 7 to get this working. Add `-CompilerOptions '-debug:embedded'` to the Add-Type call and ensure you have these options set in the VSCode launch config "attachDotnetDebugger": true, "createTemporaryIntegratedConsole": true

Jordan Borean@jborean.bsky.social

Ever wanted to debug C# code compiled through Add-Type in PowerShell? The function Add-DebuggableType at gist.github.com/jborean93/bc... can be used in PowerShell 7 to do just that. Going to try and send a PR through so that the builtin Add-Type can do the same thing.

Jordan Borean reposted

Rob Sewell He/Him
@robsewell.com

This was a fantastic #pwsh session. @shaunlawrie.com is a boss. #psconfeu #PowerShell

PSConfEU@psconf.eu

🎨 Bored of plain terminal UIs? At #PSConfEU 2025, @shaunlawrie.com showed how PwshSpectreConsole lets you build rich, interactive CLIs in PowerShell — fast. 🎟️ Early bird 2026 tickets → psconf.eu #PowerShell #SpectreConsole #TerminalUI #DevUX

youtu.be- YouTubeEnjoy the videos and music you love, upload original content, and share it all with friends, family, and the world on YouTube.

Jordan Borean reposted

Marc-André Moreau
@awakecoding.com

Why choose native over web? Because performance matters! 💻⚡ @devolutions.net is committing $3M to @avaloniaui.net to secure the future of cross-platform native desktop UI in Remote Desktop Manager 🚀 👇 blog.devolutions.net/2025/07/devo...

blog.devolutions.netDevolutions Sponsors Avalonia with $3M to Secure Native RDM FutureDevolutions invests $3M in Avalonia UI to power faster, native RDM apps — boosting performance, cross-platform support, and open-source innovation.

Jordan Borean reposted

Stephen Valdinger (aka steviecoaster)
@steviecoaster.dev

If you write #PowerShell and want to learn how to make beautiful, modern UIs for your scripts, join me tomorrow at the Research Triangle PSUG where we'll do just that leveraging the new WinUIShell module! You can find all the information on Meetup below. I hope you are able to join us!

meetup.comCreate Beautiful UIs with WinUIShell and PowerShell (Steven Valdinger), Wed, Jul 2, 2025, 8:00 PM | MeetupJoin us for a fast-paced, hands-on look at how you can ditch the designer tools and craft stunning UIs straight from the command line with WinUIShell. **Meeting Overview**

Jordan Borean reposted

Justin Grote
@posh.guru

New #PowerShell @vscode.dev Extension 2025.2.0 released! Mostly the usual boring bugfix/infra stuff, but I added one change that lets you run Temporary Consoles under a different PS than your PowerShell extension. Great for 5.1 Testing! Check out the PR in the release notes for details.

github.comRelease v2025.2.0 · PowerShell/vscode-powershellWhat's Changed Enhancements & Features ✨ Teach client to find Homebrew installations on Apple Silicon by @andyleejordan in #5164 Overhaul linting, formatting, and testing infrastructure by @andyle...
Jordan Borean
@jborean.bsky.social

Anyone interested in yet another attempt at trying to enhance splatting in #PowerShell. I've tried to collate all the options proposed over the years with their pros/cons. Hoping to get any community feedback before trying to champion a proper RFC github.com/jborean93/Po....

github.comAdd enhanced splatting RFC draft by jborean93 · Pull Request #1 · jborean93/PowerShell-RFCThis is a draft RFC of an enhanced splatting proposal. While I have my own recommendations there is no final choice as of yet to open with the real RFC. So far my gut choice would be Option 4 - the...

Jordan Borean reposted

Gilbert Sanchez (💻 HeyItsGilbert)
@gilbertsanchez.com

I slapped together a new #PowerShell module, PesterExplorer, that creates a TUI to look at your Pester run results. It leverages PwshSpectreConsole to create the TUI. Everyone knows I love #Pester. Feedback and suggestions welcome! github.com/HeyItsGil...

github.comGitHub - HeyItsGilbert/PesterExplorer: A TUI to explore Pester results.A TUI to explore Pester results. Contribute to HeyItsGilbert/PesterExplorer development by creating an account on GitHub.
Jordan Borean
@jborean.bsky.social

Fantastic post, nice use of animations as well to help illustrate what is going on here.

mdgrs@mdgrs.bsky.social

Do you know what bound and unbound script blocks are in PowerShell? I did not know but they are sometimes talked about in GitHub issues or in the community. If you are interested, check out my blog post from the past: mdgrs.hashnode.dev/scriptblock-...

Jordan Borean
@jborean.bsky.social

Did you know it is possible to use Kerberos keytabs on Windows SSPI. I've released a version of sspilib for #python that exposes this in a friendly way through the SEC_WINNT_AUTH_IDENTITY_EX2 struct cred = sspi.KeytabCredential("user@DOMAIN.COM", "kerb.keytab") github.com/jborean93/ss...

github.comRelease v0.3.0 · jborean93/sspilibWhat's Changed Bump dev deps and min py version by @jborean93 in #16 Bump sspi-rs version by @jborean93 in #17 Attempt to re-enable some tests for sspi-rs by @jborean93 in #18 Add support for the ...