Intro To Azure Pentesting Course - Hacking Azure

Name: Intro To Azure Pentesting Course - Hacking Azure
Rating: 3.9 (124 reviews)

Intro to Azure Pentesting Course - Cloud Pentesting

Created bySecurity Gurus

Last updated 9/2021

English

English [Auto],

What you'll learn

Azure Pentesting
Office 365 Pentesting
Azure AD Pentesting
Phishing Users and ByPassing MFA
Enumerate Azure
Enumerate Azure AD

Course content

6 sections • 40 lectures • 5h 18m total length

Introduction1:06
0.Penetration Testing Rules of Engagement5:28
Obtain written authorization from the company and Microsoft, confirm the subscription ID, define the scope (IPs, services, users), and follow the rules of engagement for Azure pen testing.
ASM vs ARM6:55
Azure Active Directory6:59
Integration with on-premises Active Directory3:04
Learn to integrate on-premises Active Directory with Azure AD using password hash synchronization, pass-through authentication, or Active Directory Federation Services, and set up AD Connect.
Azure AD security features9:30
Kill chain roles4:22
Create office 365 and azure account7:32
Create an Office 365 and Azure account to enable Azure Active Directory, trial access, and user management for pen testing practices.

Unauthenticated Recon - User Enum7:00
Unauthenticated Recon - Password Spraying7:39
Learn unauthenticated recon and password spraying against Office 365 accounts using the MSOL spray PowerShell script, including user lists, credential testing, and domain enumeration.
Unauthenticated Recon - onedrive_user_enum6:06
Unauthenticated Recon - cloud_enum10:54
Authenticated Recon - Az PowerShell Module10:25
Authenticated Recon - AzureAD PowerShell11:14
Connect to Azure Active Directory using PowerShell to enumerate domains, users, groups, applications, and roles, then inspect owners, credentials, and policies.
Authenticated recon - ROADtools - 18:12
Learn to use Road Recon, an Azure AD reconnaissance tool from Road Tools, to authenticate, gather Azure AD data, and visualize tenants, users, groups, devices, apps, and permissions.
Authenticated recon - o365recon - 24:09
Authenticated recon - Powerzure - 29:45
Learn how to use a PowerShell-based Azure enumeration tool for authenticated recon. Connect to Azure, import modules, and enumerate users, groups, roles, and other resources.

Authenticated recon Role Abuse- Reader RunBook8:03
Authenticated recon Role Abuse - Reader Blob Storage7:51
Authenticated Recon Role Abuse - Blob Storage4:55
demonstrates authenticated recon and role abuse in Azure blob storage by using obtained credentials to access storage, download a disk image, attach a VHD, and inspect for passwords or tokens.
Authenticated Recon Role Abuse - Contributor10:50
Authenticated Recon Role Abuse - Contributor shell8:11
Azure AD - Sign in with a service principal10:42
Looking for Tokens6:34
abusing-dynamic-groups-in-azure

Phishing Campaign - 1 deploying Ubuntu8:28
Phishing Campaign - configuring 2 evilginx27:31
Explains how to set up a phishing campaign using evilginx2, including registering a domain, configuring dns records (cname and a records), and obtaining an ssl certificate.
Phishing Campaign - phishing user password - 36:00
Phishing Campaign - ByPass MFA with Cookies - 45:50
Explore a phishing campaign that demonstrates how attackers bypass multi-factor authentication by hijacking and editing cookies to gain unauthorized access, highlighting cookie-based session manipulation.
Phishing - 365 Stealer - Setting Up and App 113:56
Phishing - 365 Stealer - Phishing and App Overview 218:28
Phishing - Word Document Macros - Reverse Shell10:50
Explore how macro-enabled Word documents facilitate phishing to establish a reverse shell in pentest scenarios, highlighting attacker techniques and defense considerations.

AutomatedLab Install and Setup6:23
Set up an automated lab with a PowerShell script to automatically create Hyper-V virtual machines, install AD Connect to synchronize with Azure, and manage ISOs and post-installation tasks.
AutomatedLab Going Over The Code9:40
Set up an automated lab in Hyper-V by configuring a lab script, defining networks, and deploying three Windows VMs, including a domain controller, a router, and a Windows 10 machine.
Installing Azure AD Connect6:23
Set up a local Azure AD Connect lab with an automated PowerShell script to create Hyper-V virtual machines and install Azure AD Connect for Azure AD synchronization.
Configure Azure AD Connect8:02
Sync Azure Ad with On-Prem Server
Start-ADSyncSyncCycle -PolicyType Delta

Seamless Single Sign-On (SSO) Install4:57
Azure AD Connect - Seamless Single Sign On Silver Ticket14:50
SSO is relying on Kerberos, and thus, has the same flaws. If the AZUREADSSOACC$ is compromised, one is able to create service tickets for impersonating any user with MFA disabled on Azure AD. This technique is also known as Silver Tickets.
Silver tickets can be created using mimikatz. In order to do so, the following parameters are required:
Username of the user to impersonate.
Domain name.
NTLM hash of the AZUREADSSOACC$ account.
SID of the user to impersonate.
Target service, which is HTTP/aadg.windows.net.nsatc.net.
Disable AMSI
Azure AD Connect - Password extraction 2 - XPN11:43
Demonstrates Azure AD Connect password extraction through hash dumping and pass-the-hash techniques, revealing clear text passwords and tools like Mimi Katz and PowerShell bypass for on-prem and cloud sync.
DCSync attack with MSOL Password - mimikatz8:18
dcsync
The KRBTGT is a local default account that acts as a service account for the Key Distribution Center (KDC) service. It's created automatically when a new domain is created. It cannot be deleted. its name cannot be changed. it cannot be enabled.

Requirements

Azure and Azure AD Knowlege

Description

Intro To Azure Pentesting Course - Cloud Pentesting Course is designed for security professionals looking to start testing how secure a company is in Azure Active Directory (AD). The course is going to cover the following phases of Azure pentesting:

Recon: gathering information on the company infrastructure and it's employees.

Initial access: getting access to the system via phishing or any other way.

Enumeration: enumerating the company's infrastructure from the inside by gathering all the groups, users, systems and more.

Privilege Escalation: Escalating our privilege by looking at common misconfiguration and exploitation.

Lateral Movement: moving from one system to another one.

What is Azure?

The Azure cloud platform is more than 200 products and cloud services designed to help you bring new solutions to life—to solve today’s challenges and create the future. Build, run, and manage applications across multiple clouds, on-premises, and at the edge, with the tools and frameworks of your choice.

Learn to abuse Azure AD and a number of services offered by it and cover multiple complex attack lifecycles against a lab containing a live Azure tenants.

Introduction to Azure AD pentesting will go into a deep dive analyzing and exploiting Enterprise Apps, App Services, Logical Apps, Function Apps, Unsecured Storage, Phishing, and Consent Grant Attacks

Also, the course will demonstrate how enumerate Storage Accounts, Key vaults, Blobs, Automation Accounts, Deployment Templates, and more.

Prerequisites

1. Basic understanding of Azure AD is desired but not mandatory.
2. Privileges to disable/change any antivirus or firewall.

Who this course is for:

Students interesting in Learning how to Pentest Azure
Students interesting in how to do a Cloud Pentesting

Intro To Azure Pentesting Course - Hacking Azure

What you'll learn

Explore related topics

Course content

Introduction8 lectures • 45min

Azure Recon9 lectures • 1hr 15min

Role Abuse and Priv Escalation8 lectures • 57min

Phishing Campaign7 lectures • 1hr 11min

Creating On-Prem4 lectures • 30min

Getting Keys to the Kingdom4 lectures • 40min

Requirements

Description

Who this course is for: