Hacking Articles Tips Tricks Videos Tutorials

KitPloit - PenTest Tools!
Offensive-Azure - Collection Of Offensive Tools Targeting Microsoft Azure

https://blogger.googleusercontent.com/img/a/AVvXsEgZHOFZxWcmcHCsU294blSAoz3ng4FukrxOYoBicFjqk69cnyNSdUHAa9GId6LCZ6PmhN0oMdKr4GM9hks1TOJPKU_wPMZVnE8dg7rzuN_ILasHRLIbkQzJ571vU9Jk3GYhoZ_I3DYqRPsxWz2ucneQX1IoTwXgR0xAuMeeMn9NzJf1EKjLjYYbI4kW=w640-h480 Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic. The current list of tools can be found below with a brief description of their functionality.

* ./Device_Code/device_code_easy_mode.py* Generates a code to be entered by the target user
* Can be used for general token generation or during a phishing/social engineering campaign.

* ./Access_Tokens/token_juggle.py* Takes in a refresh token in various ways and retrieves a new refresh token and an access token for the resource specified

* ./Access_Tokens/read_token.py* Takes in an access token and parses the included claims information, checks for expiration, attempts to validate signature

* ./Outsider_Recon/outsider_recon.py* Takes in a domain and enumerates as much information as possible about the tenant without requiring authentication

* ./User_Enum/user_enum.py* Takes in a username or list of usernames and attempts to enumerate valid accounts using one of three methods
* Can also be used to perform a password spray

* ./Azure_AD/get_tenant.py* Takes in an access token or refresh token, outputs tenant ID and tenant Name
* Creates text output file as well as BloodHound compatible aztenant file

* ./Azure_AD/get_users.py* Takes in an access token or refresh token, outputs all users in Azure AD and all available user properties in Microsoft Graph
* Creates three data files, a condensed json file, a raw json file, and a BloodHound compatible azusers file

* ./Azure_AD/get_groups.py* Takes in an access token or refresh token, outputs all groups in Azure AD and all available group properties in Microsoft Graph
* Creates three data files, a condensed json file, a raw json file, and a BloodHound compatible azgroups file

* ./Azure_AD/get_group_members.py* Takes in an access token or refresh token, outputs all group memberships in Azure AD and all available group member properties in Microsoft Graph
* Creates three data files, a condensed json file, a raw json file, and a BloodHound compatible azgroups file

* ./Azure_AD/get_subscriptions.py* Takes in an ARM token or refresh token, outputs all subscriptions in Azure and all available subscription properties in Azure Resource Manager
* Creates three data files, a condensed json file, a raw json file, and a BloodHound compatible azgroups file

* ./Azure_AD/get_resource_groups.py* Takes in an ARM token or refresh token, outputs all resource groups in Azure and all available resource group properties in Azure Resource Manager
* Creates two data files, a raw json file, and a BloodHound compatible azgroups file

* ./Azure_AD/get_vms.py* Takes in an ARM token or refresh token, outputs all virtual machines in Azure and all available VM properties in Azure Resource Manager
* Creates two data files, a raw json file, and a BloodHound compatible azgroups file InstallationOffensive Azure can be installed in a number of ways or not at all.

You are welcome to clone the repository and execute the specific scripts you want. A requirements.txtfile is included for each module to make this as easy as possible. PoetryThe project is built to work with poetry. To use, follow the next few steps:

git clone https://github.com/blacklanternsecurity/offensive-azure.git
cd ./offensive-azure
poetry install

PipThe packaged version of the repo is also kept on pypi so you can u[...]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

Offensive-Azure - Collection Of Offensive Tools Targeting Microsoft Azure

7 viewsedited 15:05

Hacking Articles Tips Tricks Videos Tutorials

KitPloit - PenTest Tools! Offensive-Azure - Collection Of Offensive Tools Targeting Microsoft Azure https://blogger.googleusercontent.com/img/a/AVvXsEgZHOFZxWcmcHCsU294blSAoz3ng4FukrxOYoBicFjqk69cnyNSdUHAa9GId6LCZ6PmhN0oMdKr4GM9hks1TOJPKU_wPMZVnE8dg7rzuN…

se pipto install as well. We recommend you use pipenvto keep your environment as clean as possible.

pipenv shell
pip install offensive_azure

UsageIt is up to you for how you wish to use this toolkit. Each module can be ran independently, or you can install it as a package and use it in that way. Each module is exported to a script named the same as the module file. For example: Poetry

poetry install
poetry run outsider_recon your-domain.com

Pip

pipenv shell
pip install offensive_azure
outsider_recon your-domain.com

Download Offensive-Azure

___________________________
@hacking_Attack
@Hacking_Video

9 viewsedited 15:05

Hacking Articles Tips Tricks Videos Tutorials

Deep Web
logins available

submitted by /u/ibnhamman
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

logins available

Posted in r/deepweb by u/ibnhamman • 1 point and 0 comments

10 viewsedited 15:11

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
The Various Utilization Methods of PHP Serialization & Deserialization

https://b.thumbs.redditmedia.com/I1yXac20sUiJanhFQ5oRrI2BnOgDhx5TnmV7OZt-DdQ.jpg submitted by /u/CyberDevil24
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

The Various Utilization Methods of PHP Serialization & Deserialization

Posted in r/hacking by u/CyberDevil24 • 1 point and 0 comments

10 viewsedited 16:28

Hacking Articles Tips Tricks Videos Tutorials

11 views16:28

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
AOL Keyword Hacks (1990s - 2001)

https://external-preview.redd.it/NrRpZjCOgZ4MxUP7o0CNlpCcJ7GVEOMx4Vs5QYzlGIo.jpg?width=640&crop=smart&auto=webp&s=496058d21f5abe770ef3812ffb5759970ba603b7 submitted by /u/endless
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

AOL Keyword Hacks (1990s - 2001)

Posted in r/hacking by u/endless • 1 point and 0 comments

7 viewsedited 16:28

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
CTF team members!

Hi everyone

As many others have done before, I wanted to find team members for CTFs. I’m occasionally able to solve challenges from CTFs so I’m not a complete beginner.

On CTFtime.org I have a “team” but it’s just been me doing the challenges. Does anyone wanna join, if they have high school level ctf experience?

submitted by /u/Scarlaire
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

CTF team members!

Hi everyone As many others have done before, I wanted to find team members for CTFs. I’m occasionally able to solve challenges from CTFs so...

8 viewsedited 16:29

About

Blog

Apps

Platform