|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/azure-pentesting-course-hacking/
课程评论：没有评论
课程名称：Azure 渗透测试入门课程 - 黑客 Azure 课程简介： Azure 渗透测试入门课程旨在帮助安全专业人员学习如何评估企业在 Azure Active Directory (AD) 中的安全性。本课程将涵盖 Azure 渗透测试的几个阶段，包括信息收集、初始访问、枚举、权限提升和横向移动。 课程内容： - **信息收集（Recon）**：获取关于公司基础设施和员工的信息。 - **初始访问（Initial Access）**：通过网络钓鱼或其他方式获取系统的访问权限。 - **枚举（Enumeration）**：从内部枚举公司的基础设施，包括收集所有组、用户、系统等信息。 - **权限提升（Privilege Escalation）**：通过查找常见的配置错误及其利用手段，提升权限。 - **横向移动（Lateral Movement）**：在不同系统之间移动获取更深入的控制。 Azure 是一个拥有超过 200 种产品和云服务的平台，旨在帮助用户开发新的解决方案以应对当今挑战，并创造未来。用户可以在多个云环境、本地环境和边缘环境中构建、运行和管理应用程序，使用自己的工具和框架。 本课程将深入分析和利用企业应用、应用服务、逻辑应用、函数应用、安全存储、网络钓鱼和授权攻击等 Azure AD 的多个服务，并覆盖针对实验室中实际 Azure 租户的复杂攻击生命周期。此外，课程还将展示如何枚举存储帐户、密钥保管库、Blob、自动化帐户、部署模板等。 先决条件： 1. 对 Azure AD 有基本了解者优先，但非必需。 2. 有权禁用或更改任何防病毒软件或防火墙设置。
Intro To Azure Pentesting Course - Cloud Pentesting Course is designed for security professionals looking to start testing how secure a company is in Azure Active Directory (AD). The course is going to cover the following phases of Azure pentesting:Recon: gathering information on the company infrastructure and it's employees.Initial access: getting access to the system via phishing or any other way.Enumeration: enumerating the company's infrastructure from the inside by gathering all the groups, users, systems and more.Privilege Escalation: Escalating our privilege by looking at common misconfiguration and exploitation.Lateral Movement: moving from one system to another one.What is Azure?The Azure cloud platform is more than 200 products and cloud services designed to help you bring new solutions to life-to solve today's challenges and create the future. Build, run, and manage applications across multiple clouds, on-premises, and at the edge, with the tools and frameworks of your choice.Learn to abuse Azure AD and a number of services offered by it and cover multiple complex attack lifecycles against a lab containing a live Azure tenants. Introduction to Azure AD pentesting will go into a deep dive analyzing and exploiting Enterprise Apps, App Services, Logical Apps, Function Apps, Unsecured Storage, Phishing, and Consent Grant AttacksAlso, the course will demonstrate how enumerate Storage Accounts, Key vaults, Blobs, Automation Accounts, Deployment Templates, and more. Prerequisites1. Basic understanding of Azure AD is desired but not mandatory.2. Privileges to disable/change any antivirus or firewall.
