CARTP Certified Azure Red Team Professional
  • README
  • Introduction
    • Topics
  • Recon & Discovery
    • Topics
  • Initial Access
    • Topics
  • Enumeration
    • Topics
  • Privilege Escalation
    • Page 5
  • Lateral Movement
    • Topics
  • Persistence
    • Topics
  • Data Mining
    • Topics
    • Page 8
  • Defenses
    • Topics
  • Defenses Bypass
    • Topics
Powered by GitBook
On this page
  1. Recon & Discovery

Topics

PreviousTopicsNextTopics

Last updated 1 year ago

  • Use OSINT and unauthenticated enumeration techniques to learn about a target organization.

  • Gather information about the target tenant.

  • Discover services used by an organization in Azure using subdomain enumeration.

  • Know how to validate email IDs for an organization.

  • Understand the default permissions that an Azure AD user has in a tenant.

Identifying Azure Resources

To enhance your reconnaissance phase, it's essential to identify the Azure resources associated with your target organization. A crucial step is exploring the DNS records for potential Azure resources. Tools like dig or online services like SecurityTrails can help in discovering the DNS records.

Engaging with Azure AD

Azure Active Directory (AD) plays a pivotal role in managing users and resources in Azure. Understanding the default permissions an Azure AD user possesses is vital. Typically, a new user in Azure AD has:

  • Read access to some basic directory information.

  • Access to join devices up to a certain limit.

  • Ability to register applications.

Leveraging PowerShell for Enumeration

PowerShell can be a potent tool for enumerating Azure environments. By using the AzureAD module, you can perform various enumeration tasks, such as listing all users, groups, and applications registered in the Azure AD tenant. Here is a basic PowerShell command to list Azure AD users:

Get-AzureADUser

Note: Ensure you have the necessary permissions before performing any enumeration activity to avoid unauthorized access.

Conclusion

A meticulous enumeration and reconnaissance phase can significantly enhance your security posture by identifying potential vulnerabilities in your organization's Azure infrastructure. Always adhere to ethical guidelines and seek permission before conducting any security assessments.

Sign up to our mailing list to receive updates!