Breaching Azure

Course overview, lab environment setup, and introduction to the Azure attack methodology used throughout the course.

Set up your attack workstation, install the required tooling, and get familiar with the Azure CLI and portal navigation.

Use the Azure Portal to enumerate resources, review IAM assignments, and identify initial attack surface across a subscription.

Leverage Azure Cloud Shell as an attack platform with pre-authenticated access to Azure APIs and built-in tooling.

Enumerate publicly exposed Azure services without credentials — storage accounts, web apps, and metadata endpoints.

Execute device code phishing and OAuth consent attacks to harvest access tokens from Entra ID users without their passwords.

Use the Azure Management and Microsoft Graph APIs to enumerate subscriptions, resources, role assignments, and escalate access.

Conduct stealthy password spray attacks against Entra ID tenants while evading lockout and Smart Lockout protections.

Extract, manipulate, and replay Azure access tokens to authenticate as users and service principals across Azure services.

Enumerate and bypass Conditional Access Policies to access protected resources from untrusted devices and locations.

Abuse misconfigured Logic Apps to exfiltrate data, trigger automated actions, and pivot within the Azure environment.

Enumerate and exploit misconfigured Azure Storage Accounts to access blobs, tables, file shares, and queues.

Abuse Azure Automation Accounts and Runbooks to execute arbitrary code under managed identity privileges.

Exploit Entra Connect sync accounts and MSOL service accounts to escalate privileges and compromise on-premises Active Directory.

Exploit cross-tenant B2B guest access to enumerate resources and pivot laterally between Azure tenants.

Use Azure and Microsoft 365 REST APIs to stealthily enumerate mailboxes, SharePoint sites, and Teams data.

Attack Azure DevOps pipelines, extract secrets from pipeline variables and Key Vault, and compromise service connections to escalate across environments.