Find Privilege Escalation Paths in Microsoft Azure with AzureHound

[@itsm3dud39]

but how do i know which services will give privilege escalation?? can you provide any resources to learn privilege escalations in cloud??

[@jackl8499]

I hope this works better than stormspotter, which I think is pretty much a dead project now.

[@meazer]

Another great vid. really good stuff.

[@elament968]

Hey Beau. When are you posting next? No pressure, but I always look forward to your videos 😊

[@lanameyers6267]

If someone hacked me doing this, how would I go about securing my account

[@CyberCelt.]

This was great Beau. More Azure attacks using BloodHound or other tools would be amazing. Thanks

[@ghostdancer9993]

So maybe I'm mis-understanding the global admin role, but it seems I can add entitlements to any resource I want by default which seems very different in AWS where the management/payer account (which seems to be the equivalent of global admin) does not have access to certain OUs or keys for example. Only the root owner or creator of that resource would. What am I missing?

[@jkdmyrs]

What are you missing? You’re comparing Azure and AWS… they’re different and have different policies under the hood…?

[@georgesiere161]

More like this! Good stuff!