|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/cloud-penetration-testing-with-azure/
课程评论：没有评论
课程名称：Azure云渗透测试 - 精通初始访问 课程概述：欢迎来到“Azure云渗透测试 - 精通初始访问”课程，这是您掌握云特定渗透测试和道德黑客技能的终极指南。该课程适合所有技能水平，结合了深入的理论知识和实用的实践练习，帮助您提升云安全专业知识，无需先前的云知识。无论您是初学者还是有经验的网络安全专业人士，此课程都非常适合您，有助于深化您在云安全方面的知识和技能。 课程首先引导您通过免费Microsoft 365和Azure订阅搭建渗透测试实验室环境。您将学习如何保护管理员账户、配置Entra ID用户账户，并利用AAD Internals等工具进行有效的侦察和目标识别。接着，课程重点教授在Azure环境中掌握初始访问技术，包括暴力破解攻击、密码喷射和复杂的钓鱼策略，使用工具如EvilGinx和GraphSpy。 您还将通过设置云存储的渗透测试实验室进行Blob搜索，运用MicroBurst和ForexBuster等工具进行可预测资源位置攻击。课程期间，您将使用多种强大的工具，包括PowerShell脚本来设置渗透测试实验室。您将学习使用的工具包括：AAD Internals、O365Spray、Evilginx、GraphSpy、MicroBurst、FeroxBuster等。 通过这样的实践性方法，确保您可以将所学技能直接应用于Azure环境。完成本课程后，您将掌握云渗透测试的坚实基础，具备检测、预防和有效保护云环境的知识和工具。
Welcome to "Cloud Penetration Testing with Azure - Master Initial Access," your ultimate guide to mastering cloud-specific penetration testing and ethical hacking in Microsoft Azure. Designed for all skill levels, this course combines comprehensive theoretical knowledge with hands-on practical exercises to enhance your cloud security expertise with NO prior cloud knowledge required.This course is ideal for both beginners and experienced cybersecurity professionals looking to deepen their knowledge and skills in cloud security.We begin by setting up your pentesting lab environment using FREE Microsoft 365 and Azure subscriptions. You'll secure admin accounts, configure Entra ID user accounts, and leverage tools like AAD Internals for effective reconnaissance and target identification.Our focus then shifts to mastering initial access techniques within Azure environments. You'll master methods such as brute force attacks, password spraying, and sophisticated phishing strategies using tools like EvilGinx and GraphSpy.You will exploit Azure cloud storage by setting up a pentesting lab for blob hunting, using tools like MicroBurst and ForexBuster to perform predictable resource location attacks.Throughout the course, you'll use a variety of powerful tools, including PowerShell scripts to setup lab for penetration testing. You will learn how to use following tools:AAD InternalsO365SprayEvilginxGraphSpyMicroBurstFeroxBusterand more...The practical approach ensures you can apply your skills directly to Azure environments.By the end of this course, you'll have a solid foundation in cloud penetration testing, equipping you with the knowledge and tools to detect, prevent, and secure cloud environment effectively.
