Azure
We validate this area during scoped assessments, documenting impact and remediation guidance.
Why it matters
- Enumerate Azure resources using Azure Portal, Azure PowerShell, or Azure CLI. - Tools: Azure Portal, Azure PowerShell, Azure CLI - Command: az resource list - Check for misconfigured Azure Storage accounts with public access. - Verify that storage account access keys and shared access signatures (SAS) are securely managed. - Tools: Azure Storage Explorer, Azure CLI - Command (Azure CLI): az storage account list - Enumerate Azure Active Directory (Azure AD) users, groups, and roles. - Identify guest users and their permissions. - Tools: Azure Portal, Azure PowerShell - Command (Azure PowerShell): Get-AzureADUser - Assess Azure Functions and Logic Apps for potential security misconfigurations and vulnerabilities. - Check for insecure Azure Functions deployments. - Tools: Azure Functions Portal, Azure CLI - Command (Azure CLI): az functionapp list
How we test it
Our operators follow a structured checklist for this topic, adapted to your API surface and authentication model.
Testing approach
- Review virtual network configurations, subnets, and network security groups (NSGs).
- Identify potential NSG misconfigurations.
- Tools: Azure Portal, Azure PowerShell, Azure CLI
- Command (Azure CLI): az network nsg list
- Analyze Azure Firewall and NSG rules for vulnerabilities and misconfigurations.
- Verify proper network segmentation.
- Review VM configurations, including OS security settings and patch management.
- Check for exposed RDP/SSH ports.
What we look for
- Review virtual network configurations, subnets, and network security groups (NSGs).
- Identify potential NSG misconfigurations.
- Tools: Azure Portal, Azure PowerShell, Azure CLI
- Command (Azure CLI): az network nsg list
- Analyze Azure Firewall and NSG rules for vulnerabilities and misconfigurations.
- Verify proper network segmentation.
- Review VM configurations, including OS security settings and patch management.
- Check for exposed RDP/SSH ports.
Related topics
| Topic | Summary |
|---|---|
| AWS | We validate this area during scoped assessments, documenting impact and remediation guidance. |
| GCP | We validate this area during scoped assessments, documenting impact and remediation guidance. |
| Subdomain Takeover | A subdomain takeover happens when a DNS record (usually a CNAME, sometimes A/NS) still points to a cloud service or external provider that is no longer claimed. An attacker registers the dangling resource on that provider and serves their own content from the victim's subdomain,… |