Resources for Cloud Pen Testing

3 min readMay 28, 2021

GitHub Repos for Tools

dafthack/MSOLSpray

nyxgeek/onedrive_user_enum

cyberark/BlobHunter

initstring/cloud_enum

dafthack/DomainPasswordSpray

ustayready/fireprox

dafthack/MailSniper

dafthack/MFASweep

kgretzky/evilginx

kgretzky/evilginx2

NREL/rdtools

hausec/PowerZure

NetSPI/MicroBurst

Azure/Stormspotter

BloodHoundAD/AzureHound

CHEAT SHEETS

OPERATOR HANDBOOK

www.netmux.com

dafthack/CloudPentestCheatsheets

OTHER LINKS

FSecureLABS/leonidas

SecurityFTW/cs-suite

nccgroup/ScoutSuite

JavaScript is not available.

Black Hills Information Security | LinkedIn

www.linkedin.com

LinkedIn Login, Sign in | LinkedIn

linkedin.com

Azure AD Password spray; from attack to detection (and prevention).

derkvanderwoude.medium.com

toniblyx/prowler

TRAINING

Breaching the Cloud w/ Beau Bullock - Training

wildwesthackinfest.com

Training and Certification | Cloud Skills Courses and Programs | AWS

aws.amazon.com

Azure on Microsoft Learn

docs.microsoft.com

Resources for Cloud Pen Testing

dafthack/MSOLSpray

A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is…

nyxgeek/onedrive_user_enum

enumerate valid onedrive users OneDrive users have a file share URL with a known location…

cyberark/BlobHunter

An opensource tool for scanning Azure blob storage accounts for publicly opened blobs. BlobHunter is a part of "Hunting…

initstring/cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud. Currently enumerates the following…

dafthack/DomainPasswordSpray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By…

ustayready/fireprox

Being able to hide or continually rotate the source IP address when making web calls can be difficult or expensive. A…

dafthack/MailSniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific…

dafthack/MFASweep

MFASweep is a PowerShell script that attempts to log in to various Microsoft services using a provided set of…

kgretzky/evilginx

THIS VERSION IS OBSOLETE. PLEASE USE THE LATEST VERSION! EVILGINX 2: https://github.com/kgretzky/evilginx2 Evilginx is…

kgretzky/evilginx2

evilginx2 is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which…

NREL/rdtools

Master branch: Development branch: RdTools is an open-source library to support reproducible technical analysis of time…

hausec/PowerZure

PowerZure is a PowerShell project created to assess and exploit resources within Microsoft's cloud platform, Azure…

NetSPI/MicroBurst

MicroBurst includes functions and scripts that support Azure Services discovery, weak configuration auditing, and post…

Azure/Stormspotter

Stormspotter creates an "attack graph" of the resources in an Azure subscription. It enables red teams and pentesters…

BloodHoundAD/AzureHound

Contribute to BloodHoundAD/AzureHound development by creating an account on GitHub.

OPERATOR HANDBOOK

TL;DR + Red Team, OSINT, Blue Team Reference most common tools & techniques.+ 100+ Cheat Sheets & References ranging…

dafthack/CloudPentestCheatsheets

By Beau Bullock (@dafthack) Get Federation info for target domain…

FSecureLABS/leonidas

This is the repository containing Leonidas, a framework for executing attacker actions in the cloud. It provides a…

SecurityFTW/cs-suite

Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure. …

nccgroup/ScoutSuite

Scout Suite is an open source multi-cloud security-auditing tool, which enables security posture assessment of cloud…

JavaScript is not available.

Edit description

Black Hills Information Security | LinkedIn

Black Hills Information Security | 56,086 followers on LinkedIn. Follow our page for blogs, webcasts, and more about…

LinkedIn Login, Sign in | LinkedIn

Login to LinkedIn to keep in touch with people you know, share ideas, and build your career.

Azure AD Password spray; from attack to detection (and prevention).

Password spray is an attack method to fly under the radar of the Security detection systems.

toniblyx/prowler

Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous…

Breaching the Cloud w/ Beau Bullock - Training

Instructor: Beau Bullock Includes: Live Presentation, PDF of Slides, Labs, Private Discord Discussion Channel with…

Training and Certification | Cloud Skills Courses and Programs | AWS

Organizations need individuals with cloud skills to help transform their business. AWS Training and Certification helps…

Azure on Microsoft Learn

View on demand sessions from Build across various solutions and technologies. Browse sessions Community Connect and…

Written by Bryan Noll