book

Pentesting Azure Applications

by Matt Burrough

July 2018

Intermediate to advanced

216 pages

6h 3m

English

No Starch Press

Read now

Unlock full access

About Penetration TestingWhat This Book Is AboutHow This Book Is OrganizedWhat You’ll Need to Run the Tools
A Hybrid ApproachGetting PermissionSummary
Azure Deployment ModelsObtaining CredentialsMimikatzBest Practices: Usernames and PasswordsUsernames and PasswordsBest Practices: Management CertificatesFinding Management CertificatesBest Practices: Protecting Privileged AccountsEncountering Two-Factor AuthenticationSummary
Installing PowerShell and the Azure PowerShell ModuleService ModelsBest Practices: PowerShell SecurityAuthenticating with the PowerShell Module and CLIAuthenticating with Management CertificatesBest Practices: Service PrincipalsAuthenticating with Service PrincipalsBest Practices: Subscription SecurityGathering Subscription InformationGathering Information on NetworkingConsolidated PowerShell ScriptsSummary
Best Practices: Storage SecurityAccessing Storage AccountsWhere to Find Storage CredentialsAccessing Storage TypesSummary
Best Practices: VM SecurityVirtual Hard Disk Theft and AnalysisExploring the VHD with AutopsyCracking Password HashesPassword Hash Attack ToolsUsing a VHD’s Secrets Against a VMResetting a Virtual Machine’s CredentialsSummary
Best Practices: Network SecurityAvoiding FirewallsCloud-to-Corporate Network BridgingSummary
Best Practices: Key VaultExamining Azure Key VaultTargeting Web AppsBest Practices: AutomationLeveraging Azure AutomationSummary
Azure Security CenterOperations Management SuiteSecure DevOps KitCustom Log HandlingSummary

Content preview from Pentesting Azure Applications

6INVESTIGATING NETWORKS

Fundamentally, a cloud is a large collection of computing and digital storage resources made available for rent. This business model relies on the internet, which allows the cloud’s users to transfer data into and out of the provider’s systems, manage remote systems, and make services like websites and email servers available to end users.

Because connectivity is so crucial to the overall success of a cloud, Azure offers users a variety of network settings. By default, Azure makes services internet-facing so that they are accessible to anyone. However, Azure also provides other networking options, used for creating links ...