Azure Red Team Learning Path

Your first day on the job as a Junior Cloud Analyst, you've been handed an Azure account and access to two resource groups without a whole lot of onboarding. Find your bearings, do the work, and figure out your permissions.

Learn the Azure CLI by investigating a missing update for a progress site. The deployment note did not reach the team, so nobody knows where the release evidence is stored or whether the update is ready to publish.

You have credentials for a client's Azure environment, but no resource inventory. Where do you start? In this beginner-friendly lab, you'll use the Azure CLI to discover resources, investigate permissions, and test access to stored data...

What can an attacker do with an exposed Azure storage container? In this beginner-friendly red-team lab, you'll start with Northstar Analytics' website URL, investigate public deployment files, and uncover an application credential. Use it to access private reports and collect proof of the breach...

In this lab, you will enumerate an Azure environment to find a Key Vault using a legacy access-policy model, and leverage a management-plane permission to grant yourself access to a secret you shouldn't be able to see. Then, you'll use the recovered credential to read a restricted document and capture the flag...

Learn how to investigate an unapproved website change with the Azure CLI. Compare the site files, examine role-assignment events in the Azure Activity Log, and review access to the storage account to identify who could change the site...