Penetration Testing on Azure : A hacker's guide to finding and exploiting Azure cloud vulnerabilities (English Edition
Description In the cyber world, securing the cloud is critical to an organization's business success. This book is about equipping the readers with the required knowledge and skills to perform a penetration test against an Azure infrastructure. Within this book, the readers will develop a detai...
Enregistré dans:
| Auteur principal: | |
|---|---|
| Format: | Livre numérique |
| Langue: | Anglais |
| Publié: |
New Delhi :
BPB Publications
2025.
Paris : Cyberlibris |
| Accès en ligne: | Accès Université d'Orléans et IFPM |
| Note: |
Couverture. https://static2.cyberlibris.com/books_upload/300pix/9789365895209.jpg Cyberlibris (ScholarVox) corpus Informatique |
| Autres localisations: | Voir dans le Sudoc |
| Edition sous un autre format: | • Penetration Testing on Azure, A hacker's guide to finding and exploiting Azure cloud vulnerabilities (English Edition, Dr Andrew Blyth, New Delhi, BPB Publications, 2025, 1 vol. (478 p.), 978-93-6589-520-9 |
| Résumé: | Description In the cyber world, securing the cloud is critical to an organization's business success. This book is about equipping the readers with the required knowledge and skills to perform a penetration test against an Azure infrastructure. Within this book, the readers will develop a detailed understanding of what Azure is and how its core component functions, along with the ability to uncover vulnerabilities, develop and deploy proof-of-concept exploits. This book systematically guides you through the technical workflow, beginning with cloud architecture and legal considerations, followed by threat intelligence and reconnaissance to map the attack surface. You immediately pivot to high-value targets, learning to exploit Azure AD for privilege escalation, auditing NSGs/VPNs for networking flaws, and attacking compute services. Finally, you will learn specialized testing of API Management, Key Vault access controls, bypassing security/monitoring services, simulating advanced threat scenarios and lateral movement, and concluding with professional reporting and remediation for continuous security improvement. By the end of this book, you will have all the necessary knowledge to successfully conduct a penetration test against an Azure infrastructure. You will learn how to not only specify a penetration test, but also how to communicate your findings and understand what the Azure components are, and how they fit together. You will also have the ability to develop and validate proof-of-concept exploits. What you will learn: Specifying and performing penetration test against an Azure infrastructure; Using threat intelligence in the specification process; Compromising Azure DevOps CI/CD Pipeline, Secrets Management, and Build Artifacts; Developing and validating proof-of-concept exploits using Python; Reporting and communicating the findings to the customer; Conducting red team lateral movement, APT simulation, and Zero Trust testing; Securing blob storage/SAS tokens; Exploiting vulnerabilities in App Services/serverless and SQL/NoSQL databases. Who this book is for: This book is for security practitioners, penetration testers, security engineers, and students who wish to learn Azure-specific security auditing |
|---|---|
| Description: | Couverture. https://static2.cyberlibris.com/books_upload/300pix/9789365895209.jpg Cyberlibris (ScholarVox) corpus Informatique |
| Accès: | L'accès en ligne est réservé aux établissements ou bibliothèques ayant souscrit l'abonnement. Cyberlibris |