Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
awesome-azure-security
A curated list of awesome Microsoft Azure Security tools, guides, blogs, and other resources.
https://github.com/kmcquade/awesome-azure-security
- Azucar
- BloodHound
- ScoutSuite - Cloud Security auditing tool. [](https://badgen.net/github/stars/nccgroup/ScoutSuite)
- Steampipe - source benchmarks & dashboards for security & insights. [](https://badgen.net/github/stars/turbot/steampipe)
- StormSpotter
- MicroBurst
- PowerZure
- ROADrecon
- Checkov
- Terraform Compliance for Azure - mod-terraform-azure-compliance)](https://badgen.net/github/stars/turbot/steampipe-mod-terraform-azure-compliance)
- tfsec
- DumpsterDiver
- Azure security logging and auditing
- Azure Security Center - Alerts Reference Guide
- Attacking Azure Cloud Shell - account command execution and privilege escalation.
- Nuking all Azure Resource Groups under all Azure Subscriptions - wide god-mode Service Principals to nuke an entire Azure environment.
- Privilege Escalation and Lateral Movement on Azure
- Privilege Escalation in Azure AD
- Privilege Escalation and Lateral Movement on Azure
- Abusing Azure AD SSO with the Primary Refresh Token - long term tokens stored on your laptop or other AD connected resources - for Single Sign On (SSO) against on-prem and Azure AD connected resources. See Dirk-jan Mollema's blog goes over abusing these tokens, which you can access if you have code execution on a target or on your laptop that is Azure AD joined.
- Detect Azure network configuration mistakes with visualization using Flow Logs and Traffic Analytics
- Use Azure API Management and Keyvault to authorize based on API body values
- Awesome Azure Learning - azure-learning)](https://badgen.net/github/stars/ddneves/awesome-azure-learning)
- Azure AZ 500 Study Guide - AZ-500-Study-Guide)](https://badgen.net/github/stars/AzureMentor/Azure-AZ-500-Study-Guide)
- Azure AZ 500 Labs by Microsoft - AzureSecurityTechnologies)](https://badgen.net/github/stars/MicrosoftLearning/AZ500-AzureSecurityTechnologies)
- Breaking and Pwning Apps and Servers on AWS and Azure - and-pwning-apps-and-servers-aws-azure-training)](https://badgen.net/github/stars/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training)
Keywords
azure
7
security
4
terraform
3
gcp
3
aws
3
steampipe
2
sql
2
kubernetes
2
cloud
2
aws-security
2
compliance
2
devops
2
azure-security
2
auditing
1
azure-learning
1
azure-certs
1
cis
1
azure-architecture
1
awesome-list
1
awesome
1
pentesting
1
penetration-testing
1
opensource
1
free
1
application-security
1
study-guide
1
microsoft-azure-security
1
exam
1
steampipe-mod
1
powerpipe-mod
1
powerpipe
1
static-analysis
1
scans
1
infrastructure-as-code
1
cloudformation
1
python
1
microsoft-graph
1
azuread
1
azure-active-directory
1
windows
1
powershell
1
infosec
1
zero-etl
1
sqlite
1
postgresql-fdw
1
postgresql
1
golang
1
etl
1
devsecops
1
cspm
1