Azure Recon to Foothold & Profit! -- [Azure Pentesting]

Join the Hack Smarter community: hacksmarter.org
--- In this video, I work through the "Azure Recon to Foothold & Profit" lab on Pwnedlabs.io. This is one of my favorite Azure labs so far!
We begin with a target domain and a leaked password from Pastebin. From there, I demonstrate all the following to get the final flag:
Unauthenticated and authenticated Azure enumeration
Utilizing red team tooling to confirm valid credentials and gain a foothold
Entra ID user, group, role and RBAC enumeration
Azure App Service Web App enumeration
Leveraging Kudu diagnostic site for lateral movement
Familiarity with the sqlcmd utility
Enjoy! ----------
This content is intended for educational purposes only. All demonstrations and techniques shown are designed to teach ethical hacking and improve cybersecurity. Any use of the information provided in these videos is done at your own risk and should be used responsibly. Unauthorized hacking, illegal activities, or violations of privacy are not endorsed or encouraged. Always ensure you have proper authorization before attempting any security testing or hacking.

[@learnwithshahzebb]

I'm watching the video but seems like you're talking to me. Great teaching skills

[@xLe0xHacks]

What are the basics should I have to start azure pentesting?

[@gameblendingreality]

thank you!

[@Kingdd1os]

Woow❤ please Tyler if you have time to make a Video about how you set up home network and vm and where you have your public Server for ctfs and pentesting.

[@danieldaniel-uf2hl]

I must ask - AADInternals runs on Windows. That means that you run 2 VMs? kali-linux and Windows10? its a littlebit strange that in windows we have the option to run CMD and Powershell , but in Linux we can't run Powershell. i'm asking because I want to work only throw my Kali-Linux . Thanks and awesome video :)

[@danieldaniel-uf2hl]

and if so which windows VM image do you use? Is there a published Windows VM with majority of the tools installed already?

[@cybersamurai99]

@@danieldaniel-uf2hl we can run powershell on kali mate, just run the command pwsh to open a powershell terminal on Kali

[@Ri0zify]

What do you mean? Kali has built-in powershell.

[@smallzfreddy5521]

Hi Tyler, what screenshot tool did you use on this recording?

[@TylerRamsbey]

Flameshot :)

[@smallzfreddy5521]

❤