hausec

In Azure land, there’s many resources for many reasons.

In Azure, there are several ways to execute commands on a running virtual machine aside from using RDP or SSH to remote in and open a shell.

It’s been almost a year since my Azure exploitation project PowerZure received an update and in the changing world of Azure/cloud, that means several things broke.

Currently, command execution on virtual machines (VM) in Azure happens through the cmdlet Invoke-AzVMRunCommand.

Abstract When I published my first article, Attacking Azure & Azure AD and Introducing PowerZure, I had no idea I was just striking the tip of the iceberg.

It’s been known that some built-in commands in Cobalt Strike are major op-sec no-no’s, but why are they bad?

Over the years of penetration testing, red teaming, and teaching, I (and I’m sure a lot of others) are often asked how to get started in infosec.

List of Cypher queries to help analyze AzureHound data.

I was recently on an engagement where we phished in and ran into UAC which gave me more trouble than I expected.

Kerberos is the preferred way of authentication in a Windows domain, with NTLM being the alternative.