Azure Vulnerability Testbed (AzGOAT)
summary
AzGOAT presents concrete Azure exploits and a working lab: SSRF in an app yields a managed identity token and subscription keys, a public blob reveals VM credentials that lead to an Azure SQL dump of customer rows, and a misconfigured Function leaks storage keys enabling a restricted reverse shell. Automation uses Terraform scripts to create VMs, NSGs, blob containers and uploads sample data; demos show using Storage Explorer and scripts to extract keys and run queries. Roadmap promises open‑source scenarios and subscription/key vault escalation tests.
AI-written summary · about
chapters (10)
- 0:00Start
- 2:37A Market Leader Azure
- 7:37Threats affecting Azure Environment
- 9:15Solution
- 23:39Introductory Demo
- 31:13Publicly exposed storage to a compromised database!
- 32:12Investigation
- 41:56Roadmap
- 44:10Action Items
- 46:50Reference
related talks
51mAdvanced Attack Vectors in Azure Environments
41mUncovering Azure's Silent Threats: A Journey into Cloud Vulnerabilities
52mUncovering Azure's Silent Threats: A Journey Into Cloud Vulnerabilities
49mAzure DevOps security - Lessons learned
55mAzure Attacks Unpacked: Real-World Threats & Lessons
55mOffensive Azure Security
52mPentesting Azure Container Services
59mPentesting Azure Container Services