{"id":13649485,"url":"https://github.com/ine-labs/AzureGoat","last_synced_at":"2025-04-22T14:32:02.931Z","repository":{"id":55402683,"uuid":"523055206","full_name":"ine-labs/AzureGoat","owner":"ine-labs","description":"AzureGoat : A Damn Vulnerable Azure Infrastructure","archived":false,"fork":false,"pushed_at":"2024-10-30T06:37:46.000Z","size":39278,"stargazers_count":836,"open_issues_count":5,"forks_count":196,"subscribers_count":11,"default_branch":"master","last_synced_at":"2025-04-15T00:46:42.577Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/ine-labs.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2022-08-09T17:54:54.000Z","updated_at":"2025-04-14T09:23:52.000Z","dependencies_parsed_at":"2024-10-30T07:34:59.408Z","dependency_job_id":null,"html_url":"https://github.com/ine-labs/AzureGoat","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ine-labs%2FAzureGoat","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ine-labs%2FAzureGoat/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ine-labs%2FAzureGoat/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ine-labs%2FAzureGoat/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/ine-labs","download_url":"https://codeload.github.com/ine-labs/AzureGoat/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":250259093,"owners_count":21401039,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-02T02:00:17.412Z","updated_at":"2025-04-22T14:31:57.921Z","avatar_url":"https://github.com/ine-labs.png","language":"Python","funding_links":[],"categories":["Sorted by Technology and Category","Cloud Security","Other Lists","0x03 靶场 :dart:","Support","Training Labs"],"sub_categories":["🧪 LAB","云服务靶场","Azure"],"readme":"# AzureGoat : A Damn Vulnerable Azure Infrastructure\r\n\r\n![1](https://user-images.githubusercontent.com/25884689/183740998-da6f7ae7-2df0-4557-a6f5-2f0040ebe0dc.png)\r\n\r\nCompromising an organization's cloud infrastructure is like sitting on a gold mine for attackers. And sometimes, a simple misconfiguration or a vulnerability in web applications, is all an attacker needs to compromise the entire infrastructure. Since the cloud is relatively new, many developers are not fully aware of the threatscape and they end up deploying a vulnerable cloud infrastructure. Microsoft Azure cloud has become the second-largest vendor by market share in the cloud infrastructure providers (as per multiple reports), just behind AWS. There are numerous tools and vulnerable applications available for AWS for the security professional to perform attack/defense practices, but it is not the case with Azure. There are far fewer options available to the community.\r\n\r\nAzureGoat is a vulnerable by design infrastructure on Azure featuring the latest released OWASP Top 10 web application security risks (2021) and other misconfiguration based on services such as App Functions, CosmosDB, Storage Accounts, Automation and Identities. AzureGoat mimics real-world infrastructure but with added vulnerabilities. It features multiple escalation paths and is focused on a black-box approach.\r\n\r\nAzureGoat uses IaC (Terraform) to deploy the vulnerable cloud infrastructure on the user's Azure account. This gives the user complete control over code, infrastructure, and environment. Using AzureGoat, the user can learn/practice:\r\n- Cloud Pentesting/Red-teaming\r\n- Auditing IaC\r\n- Secure Coding\r\n- Detection and mitigation\r\n\r\nThe project is divided into modules and each module is a separate web application, powered by varied tech stacks and development practices. \r\n\r\n**Presented at**\r\n\r\n- [BlackHat USA 2022](https://www.blackhat.com/us-22/arsenal/schedule/index.html#azuregoat--a-damn-vulnerable-azure-infrastructure-28000)\r\n- [DC 30: Demo Labs](https://forum.defcon.org/node/242061)\r\n\r\n### Developed with :heart: by [INE](https://ine.com/) \r\n\r\n[\u003cimg src=\"https://user-images.githubusercontent.com/25884689/184508144-f0196d79-5843-4ea6-ad39-0c14cd0da54c.png\" alt=\"drawing\" width=\"200\"/\u003e](https://discord.gg/TG7bpETgbg)\r\n\r\n## Built With\r\n\r\n* Azure\r\n* React\r\n* Python 3\r\n* Terraform\r\n\r\n## Vulnerabilities\r\n\r\nThe project is scheduled to encompass all significant vulnerabilities including the OWASP TOP 10 2021, and popular cloud misconfigurations.\r\nCurrently, the project  contains the following vulnerabilities/misconfigurations.\r\n\r\n* XSS\r\n* SQL Injection\r\n* Insecure Direct Object reference\r\n* Server Side Request Forgery on App Function Environment\r\n* Sensitive Data Exposure and Password Reset\r\n* Storage Account Misconfigurations\r\n* Identity Misconfigurations\r\n\r\n# Getting Started\r\n\r\n### Prerequisites\r\n* An Azure Account\r\n\r\n\r\n### Installation\r\n\r\nTo ease the deployment process the user just needs to clone this repo, login to azure cli then initialize and apply the Terraform file. This workflow will deploy the whole infrastructure and output the hosted application's URL. \r\n\r\nHere are the steps to follow:\r\n\r\n**Step 1.** Clone the repo\r\n\r\n```sh\r\ngit clone https://github.com/ine-labs/AzureGoat\r\n```\r\n\r\n**Step 2.** Login to Azure CLI\r\n\r\n```sh\r\naz login\r\n```\r\n\r\nAnd follow the steps to sign in.\r\n\r\n**Step 3.** Create a resource group with the name \"azuregoat_app\".\r\n\r\n**Step 4.** Use terraform to deploy AzureGoat\r\n\r\n```sh\r\nterraform init\r\nterraform apply --auto-approve\r\n```\r\n\r\n# Modules\r\n\r\n## Module 1\r\n\r\nThe first module features a serverless blog application utilizing Azure App Functions, Storage Accounts, CosmosDB, and Azure Automation. It consists of various web application vulnerabilities and facilitates exploitation of misconfigured Azure resources.\r\n\r\nOverview of escalation paths for module-1\r\n\r\n![6](https://user-images.githubusercontent.com/25884689/183740988-9fa75f39-8c85-4db7-a5a9-c0f4acdb2783.png)\r\n\r\n# Contributors\r\n\r\nNishant Sharma, Director, Lab Platform, INE \u003cnsharma@ine.com\u003e\r\n\r\nJeswin Mathai, Chief Architect, Lab Platform, INE  \u003cjmathai@ine.com\u003e\r\n\r\nRachna Umaraniya, Cloud Developer, INE \u003crumaraniya@ine.com\u003e\r\n\r\nSherin Stephen, Software Engineer (Cloud), INE \u003csstephen@ine.com\u003e\r\n\r\nShantanu Kale, Cloud Developer, INE \u003cskale@ine.com\u003e\r\n\r\nSanjeev Mahunta, Software Engineer (Cloud), INE \u003csmahunta@ine.com\u003e\r\n\r\nD Yashwanth Babu, Software Engineer (Cloud), INE \u003cdbabu@ine.com\u003e\r\n\r\n# Solutions\r\n\r\nThe offensive manuals are available in the [attack-manuals](attack-manuals/) directory, and the defensive manuals are available in the [defence-manuals](defence-manuals/) directory. \r\n\r\nModule 1 Exploitation Videos: https://www.youtube.com/playlist?list=PLcIpBb4raSZGdYHKpqIu5Boc2ziga4oGY \r\n\r\n# Documentation\r\n\r\nFor more details refer to the \"AzureGoat.pdf\" PDF file. This file contains the slide deck used for presentations.\r\n\r\n# Screenshots\r\n\r\nBlog Application HomePage\r\n\r\n![1](https://user-images.githubusercontent.com/25884689/183741003-04609eaa-63fd-43c3-9851-d1e10b5763a9.png)\r\n\r\nBlog Application Login Portal\r\n\r\n![2](https://user-images.githubusercontent.com/65826354/183737940-b1fa7b71-82cb-4744-af6a-22386c22a934.png)\r\n\r\nBlog Application Register Page\r\n\r\n![3](https://user-images.githubusercontent.com/65826354/183737954-2ede9a5b-0797-4eef-8329-9871c14327fd.png)\r\n\r\nBlog Application Logged in Dashboard\r\n\r\n![4](https://user-images.githubusercontent.com/65826354/183737967-a2af9d1e-9805-4658-8055-f3f7ee982b63.png)\r\n\r\nBlog Application User Profile\r\n\r\n![5](https://user-images.githubusercontent.com/65826354/183737979-20c60ca1-14e0-4da9-a3c7-161ef9a62591.png)\r\n\r\n## Contribution Guidelines\r\n\r\n* Contributions in the form of code improvements, module updates, feature improvements, and any general suggestions are welcome. \r\n* Improvements to the functionalities of the current modules are also welcome. \r\n* The source code for each module can be found in ``modules/module-\u003cNumber\u003e/src`` this can be used to modify the existing application code.\r\n\r\n# License\r\n\r\nThis program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License v2 as published by the Free Software Foundation.\r\n\r\nThis program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.\r\n\r\nYou should have received a copy of the GNU General Public License along with this program. If not, see http://www.gnu.org/licenses/.\r\n\r\n# Sister Projects\r\n\r\n- [AWSGoat](https://github.com/ine-labs/AWSGoat)\r\n- [GCPGoat](https://github.com/ine-labs/GCPGoat)\r\n- [PA Toolkit (Pentester Academy Wireshark Toolkit)](https://github.com/pentesteracademy/patoolkit)\r\n- [ReconPal: Leveraging NLP for Infosec](https://github.com/pentesteracademy/reconpal) \r\n- [VoIPShark: Open Source VoIP Analysis Platform](https://github.com/pentesteracademy/voipshark)\r\n- [BLEMystique](https://github.com/pentesteracademy/blemystique)\r\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fine-labs%2FAzureGoat","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fine-labs%2FAzureGoat","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fine-labs%2FAzureGoat/lists"}