A comprehensive guide to penetration testing cloud services deployed with Microsoft Azure, the popular cloud computing service provider used by companies like Warner Brothers and Apple.

You'll learn how to:
-Gain access by circumventing two-factor authentication and stealing management certificates from developer machines
-Make sense of Azure's services by using PowerShell commands to find IP addresses, administrative users, and firewall rules
-Exploit Azure's storage model and recover storage keys
-Attack virtual machines and acquire passwords, binaries, code, and settings files
-Compromise networks by modifying firewall rules
-Attack specialized services like Azure Key Vault and Azure Websites
-Know when you might be caught by viewing logs and security events

Packed with real-world examples from the author's experience as a corporate penetration tester, sample scripts from attacks, and "Defenders Tips" that explain how companies can reduce risk, Attacking Microsoft Azure provides a clear overview of Azure's vulnerabilities and how to take advantage of them.

渗透测试使用微软Azure部署的云服务的全面指南，微软Azure是华纳兄弟和苹果等公司使用的流行云计算服务提供商。

你将学会如何。

-通过规避双因素认证和窃取开发者机器的管理证书来获取访问权

-通过使用PowerShell命令查找IP地址、管理用户和防火墙规则来了解Azure的服务

-利用Azure的存储模型并恢复存储密钥

-攻击虚拟机并获取密码、二进制文件、代码和设置文件

-通过修改防火墙规则破坏网络

-攻击Azure密钥库和Azure网站等专门服务

-通过查看日志和安全事件了解何时可能被发现

攻击微软Azure》包含了作者作为企业渗透测试员的真实案例、攻击的样本脚本，以及解释公司如何降低风险的 "防御者提示"，对Azure的漏洞以及如何利用这些漏洞进行了清晰的概述。