Intro To Azure Pentesting Course - Hacking Azure

Explore unauthenticated recon and user enumeration in Azure by testing sign-in responses to distinguish valid from invalid usernames, using manual checks and an automated Office 365 script.

Learn unauthenticated recon and password spraying against Office 365 accounts using the MSOL spray PowerShell script, including user lists, credential testing, and domain enumeration.

Perform unauthenticated recon by enumerating OneDrive users with a GitHub Python script, using a target company and a user list, and test accounts against SharePoint OneDrive to identify valid users.

Explore unauthenticated cloud enumeration with a Python script that scans Azure, AWS, and GCP resources such as storage accounts, containers, websites, databases, and VMs, with region controls and customizable wordlists.

Connect to your Azure account and enumerate resources with the Az PowerShell module, listing subscriptions, context, resource groups, storage, web apps, automation accounts, virtual networks, and public IPs for recon.

Connect to Azure Active Directory using PowerShell to enumerate domains, users, groups, applications, and roles, then inspect owners, credentials, and policies.

Learn to use Road Recon, an Azure AD reconnaissance tool from Road Tools, to authenticate, gather Azure AD data, and visualize tenants, users, groups, devices, apps, and permissions.

Perform authenticated recon of Azure AD with o365recon using PowerShell on Windows, generating user and group membership data and saving results to a file for security testing.

Learn how to use a PowerShell-based Azure enumeration tool for authenticated recon. Connect to Azure, import modules, and enumerate users, groups, roles, and other resources.

Explore Azure automation runbooks and reader permissions, demonstrate exporting runbook content and identifying clear text credentials embedded in runbooks, highlighting security risks and best practices.

Perform authenticated recon of Azure blob storage, enumerate containers, verify access rights, and locate credentials in blob data using tools like blob hunter and cloud scraper.

demonstrates authenticated recon and role abuse in Azure blob storage by using obtained credentials to access storage, download a disk image, attach a VHD, and inspect for passwords or tokens.

Demonstrate enumeration and abuse potential of the contributor role in Azure, from reading targets and key vault content to running commands on a Windows server and establishing a reverse shell.

Explore authenticated reconnaissance using a contributor shell to deploy a one-liner payload, establish a reverse shell, and bypass controls via Azure Run Command.

Illustrates privilege escalation in azure ad by distinguishing app registrations from service principals and shows an app owner changing a password, creating a user, and granting global admin.

Identify where azure access tokens reside on windows, and learn how to import and use a token to access an azure subscription with owner roles.

Deploy an Ubuntu server and install evilginx2 to run a phishing campaign. Collect credentials and session cookies to bypass two-factor authentication.

Explains how to set up a phishing campaign using evilginx2, including registering a domain, configuring dns records (cname and a records), and obtaining an ssl certificate.

Launch a phishing campaign to demonstrate credential harvesting via a man-in-the-middle setup that redirects to a fake Office 365 login, capturing passwords and authorization tokens.

Explore a phishing campaign that demonstrates how attackers bypass multi-factor authentication by hijacking and editing cookies to gain unauthorized access, highlighting cookie-based session manipulation.

This lecture explains setting up the 365 stihler phishing tool, installing Python and Apache, organizing files, and registering an Azure AD app with email, OneDrive, and notes permissions.

learn how to set up and configure a phishing workflow using 365 stealer, including client id, redirect url, and macros to access office 365 and one drive data.

Explore how macro-enabled Word documents facilitate phishing to establish a reverse shell in pentest scenarios, highlighting attacker techniques and defense considerations.

Set up an automated lab with a PowerShell script to automatically create Hyper-V virtual machines, install AD Connect to synchronize with Azure, and manage ISOs and post-installation tasks.

Set up an automated lab in Hyper-V by configuring a lab script, defining networks, and deploying three Windows VMs, including a domain controller, a router, and a Windows 10 machine.

Set up a local Azure AD Connect lab with an automated PowerShell script to create Hyper-V virtual machines and install Azure AD Connect for Azure AD synchronization.

Learn to install seamless single sign-on with on-premises Active Directory and Azure AD Connect, observe how it signs users into cloud services, and assess Kerberos-based risks and mitigations.

Demonstrates Azure AD Connect password extraction through hash dumping and pass-the-hash techniques, revealing clear text passwords and tools like Mimi Katz and PowerShell bypass for on-prem and cloud sync.