diff --git a/Methodology and Resources/Cloud - AWS Pentest.md b/Methodology and Resources/Cloud - AWS Pentest.md index 4525c25..070e255 100644 --- a/Methodology and Resources/Cloud - AWS Pentest.md +++ b/Methodology and Resources/Cloud - AWS Pentest.md @@ -33,6 +33,7 @@ ## Training +* AWSGoat : A Damn Vulnerable AWS Infrastructure - https://github.com/ine-labs/AWSGoat * Damn Vulnerable Cloud Application - https://medium.com/poka-techblog/privilege-escalation-in-the-cloud-from-ssrf-to-global-account-administrator-fd943cf5a2f6 * SadCloud - https://github.com/nccgroup/sadcloud * Flaws - http://flaws.cloud diff --git a/Methodology and Resources/Cloud - Azure Pentest.md b/Methodology and Resources/Cloud - Azure Pentest.md index 1c1ad9f..8170edd 100644 --- a/Methodology and Resources/Cloud - Azure Pentest.md +++ b/Methodology and Resources/Cloud - Azure Pentest.md @@ -4,6 +4,7 @@ * [Azure Recon Tools](#azure-recon-tools) * [Terminology](#terminology) +* [Training](#training) * [Enumeration](#enumeration) * [Enumerate valid emails](#enumerate-valid-emails) * [Enumerate Azure Subdomains](#enumerate-azure-subdomains) @@ -215,7 +216,12 @@ * **Azure AD Directory**: Each tenant has a dedicated Directory. This is used to perform identity and access management functions for resources. * **Subscriptions**: It is used to pay for services. There can be multiple subscriptions in a Directory. * **Core Domain**: The initial domain name .onmicrosoft.com is the core domain. It is possible to define custom domain names too. - + + +## Training + +* AzureGoat : A Damn Vulnerable Azure Infrastructure - https://github.com/ine-labs/AzureGoat + ## Enumeration