wanderer/ PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-04-24 05:05:01 +02:00
Code Issues Releases Activity

Merge pull request #621 from SSKale1/master 

Add AWSGoat and Azure Training, AzureGoat
This commit is contained in:
Swissky 2023-02-01 09:54:34 +01:00 committed by GitHub
parent 4451d4919a b03250a4f6
commit 8c88590d7c
Signed by: GitHub
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
Methodology and Resources/Cloud - AWS Pentest.md
View File

@ -33,6 +33,7 @@
## Training
* AWSGoat : A Damn Vulnerable AWS Infrastructure - https://github.com/ine-labs/AWSGoat
* Damn Vulnerable Cloud Application - https://medium.com/poka-techblog/privilege-escalation-in-the-cloud-from-ssrf-to-global-account-administrator-fd943cf5a2f6
* SadCloud - https://github.com/nccgroup/sadcloud
* Flaws - http://flaws.cloud

8
Methodology and Resources/Cloud - Azure Pentest.md
View File

@ -4,6 +4,7 @@
* [Azure Recon Tools](#azure-recon-tools)
* [Terminology](#terminology)
* [Training](#training)
* [Enumeration](#enumeration)
* [Enumerate valid emails](#enumerate-valid-emails)
* [Enumerate Azure Subdomains](#enumerate-azure-subdomains)
@ -215,7 +216,12 @@
* **Azure AD Directory**: Each tenant has a dedicated Directory. This is used to perform identity and access management functions for resources.
* **Subscriptions**: It is used to pay for services. There can be multiple subscriptions in a Directory.
* **Core Domain**: The initial domain name <tenant>.onmicrosoft.com is the core domain. It is possible to define custom domain names too.
## Training
* AzureGoat : A Damn Vulnerable Azure Infrastructure - https://github.com/ine-labs/AzureGoat
## Enumeration