Explore techniques for attacking Azure environments using PowerShell in this 27-minute conference talk by Karl Fosaaen at Derbycon 2018. Learn about dumping sensitive data, utilizing PowerShell modules, and leveraging Microburst for various Azure services. Discover methods for exploiting Active Directory, Azure Blob Storage, Microsoft Sequel, and Automation Accounts. Follow along with command examples, sample escalation techniques, and demonstrations of DNS brute-forcing. Gain insights into required reading and essential background information for effectively penetrating Azure infrastructures.
Overview
Syllabus
Introduction
Background on Karl
Dumping Sure Data
Different Ways to Dump Data
PowerShell Modules
Required Reading
Microburst Overview
Command Examples
Other Services
Primer
Active Directory
Azure Blob Storage
Microsoft Sequel
Automation Accounts
Sample Escalation
Import Module
Test VHD
Crack NTLM hash
Load VHD file
RDP in
Secrets
Password
Demo
DNS Bruteforcing
Conclusion
