Git
/
mgeeky-Penetration-Testing-Tools
mirror of https://github.com/mgeeky/Penetration-Testing-Tools.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
mgeeky-Penetration-Testing-.../clouds/azure/README.md

1.0 KiB
Raw Blame History

Azure-related penetration testing scripts, tools and Cheatsheets

  • AzureRT - Powershell module implementing various cmdlets to interact with Azure and Azure AD from an offensive perspective. Helpful utilities dealing with access token based authentication, easily switching from Az to AzureAD and az cli interfaces, easy to use pre-made attacks such as Runbook-based command execution and more.

    Authentication & Token mechanics:

    • Get-ARTWhoami
    • Connect-ART
    • Connect-ARTAD
    • Connect-ARTADServicePrincipal
    • Get-ARTAccessTokenAzCli
    • Get-ARTAccessTokenAz
    • Get-ARTAccessTokenAzureAD
    • Parse-JWTtokenRT
    • Remove-ARTServicePrincipalKey

    Recon and Situational Awareness:

    • Get-ARTResource
    • Get-ARTRolePermissions
    • Get-ARTADRolePermissions
    • Get-ARTRoleAssignment
    • Get-ARTKeyVaultSecrets

    Privilege Escalation:

    • Add-ARTUserToGroup
    • Add-ARTUserToRole

    Lateral Movement:

    • Invoke-ARTAutomationRunbook