Hacking the Cloud
Leveraging domain access to pivot into target cloud deployments on Microsoft Azure and other providers.
Summary
Domain-to-Cloud Pivot
Red teams often achieve deep domain access through traditional network compromise. However, many targets now have infrastructure in the cloud. Understanding how to follow when the path leads to cloud deployments is critical.
Cloud-Aware Penetration Testing
Red teams and penetration testers must think beyond traditional network boundaries and follow data and services into cloud environments. Azure remains the primary focus, but concepts apply to other cloud providers.
Attack Methodology
The talk focuses on taking domain access and leveraging internal access as a ticket to cloud deployments. Round-trip attacks from cloud to on-premises targets are discussed, including authorizations required to access cloud resources.
Microsoft Azure Focus
While largely focused on Azure implementations, the general approaches and attack patterns are applicable across most cloud providers. Understanding Azure-specific pivot points and authentication mechanisms is essential for modern penetration testing.
Related talks
TROOPERS IT Security Conference·48 min
Security researchers examine technical aspects of TR19: I'm in your cloud, reading everyone's emails - hacking Azure AD via Active Directory.
TROOPERS IT Security Conference·1 hr 4 min
Core Security Principles
Core Security Principles investigates TR19: Active Directory and Azure.
Hack In The Box Security Conference·52 min
Bill Ben Haim · Zur Ulianitzky
Bill Ben Haim details #HITBCW2021 D1 - Attack Scenarios Abusing Azure Active Directory.