Blog > Technical Blog > Cloud Penetration Testing
Cloud Penetration Testing

                                        <img width="832" height="451" src="https://www.netspi.com/wp-content/uploads/111623_Function-App-Follow-Up-Karl_Feature.jpg" alt="">                                  
                                    
                                                            Technical Blog
                                                        
                                                            Cloud Penetration Testing
                                                        
November 16, 2023
Mistaken Identity: Extracting Managed Identity Credentials from Azure Function Apps 
                                                    
                                                            <img data-del="avatar" src='https://www.netspi.com/wp-content/uploads/Karl-Fosaaen_Web-150x150.jpg' class='avatar pp-user-avatar avatar-96 photo ' height='96' width='96'/>                                                              
                                                    
                                        <img width="832" height="451" src="https://www.netspi.com/wp-content/uploads/110223_BLOG_AzureDisclosure-KyleR_Feature.jpg" alt="">                                  
                                    
                                                            Technical Blog
                                                        
                                                            Cloud Penetration Testing
                                                        
November 2, 2023
Abusing Entra ID Misconfigurations to Bypass MFA
                                                    
                                                            <img data-del="avatar" src='https://www.netspi.com/wp-content/uploads/Kyle-Rozendaal-150x150.jpg' class='avatar pp-user-avatar avatar-96 photo ' height='96' width='96'/>                                                              
                                                    
                                        <img width="832" height="451" src="https://www.netspi.com/wp-content/uploads/081223_DefCon-Function-App-Tech-Blog_Feature.jpg" alt="">                                  
                                    
                                                            Technical Blog
                                                        
                                                            Cloud Penetration Testing
                                                        
August 12, 2023
What the Function: Decrypting Azure Function App Keys 
                                                    
                                                            <img data-del="avatar" src='https://www.netspi.com/wp-content/uploads/Thomas-Elling-150x150.jpg' class='avatar pp-user-avatar avatar-96 photo ' height='96' width='96'/>                                                              
                                                    
                                                            <img data-del="avatar" src='https://www.netspi.com/wp-content/uploads/Karl-Fosaaen_Web-150x150.jpg' class='avatar pp-user-avatar avatar-96 photo ' height='96' width='96'/>                                                              
                                                    
                                        <img width="832" height="451" src="https://www.netspi.com/wp-content/uploads/032323_Azure-Function-App_Feature.jpg" alt="">                                  
                                    
                                                            Technical Blog
                                                        
                                                            Cloud Penetration Testing
                                                        
March 23, 2023
Escalating Privileges with Azure Function Apps
                                                    
                                                            <img data-del="avatar" src='https://www.netspi.com/wp-content/uploads/Karl-Fosaaen_Web-150x150.jpg' class='avatar pp-user-avatar avatar-96 photo ' height='96' width='96'/>                                                              
                                                    
                                        <img width="832" height="451" src="https://www.netspi.com/wp-content/uploads/030823_Pivoting-Clouds-in-AWS-Organizations–Part-2-Blog_Feature.jpg" alt="">                                  
                                    
                                                            Technical Blog
                                                        
                                                            Cloud Penetration Testing
                                                        
March 7, 2023
Pivoting Clouds in AWS Organizations – Part 2: Examining AWS Security Features and Tools for Enumeration
                                                    
                                                            <img data-del="avatar" src='https://www.netspi.com/wp-content/uploads/Scott-Weston-150x150.jpg' class='avatar pp-user-avatar avatar-96 photo ' height='96' width='96'/>                                                              
                                                    
                                        <img width="832" height="451" src="https://www.netspi.com/wp-content/uploads/030623_Pivoting-Clouds-in-AWS-Organizations–Part-1-Blog_Feature.jpg" alt="">                                  
                                    
                                                            Technical Blog
                                                        
                                                            Cloud Penetration Testing
                                                        
March 6, 2023
Pivoting Clouds in AWS Organizations – Part 1: Leveraging Account Creation, Trusted Access, and Delegated Admin
                                                    
                                                            <img data-del="avatar" src='https://www.netspi.com/wp-content/uploads/Scott-Weston-150x150.jpg' class='avatar pp-user-avatar avatar-96 photo ' height='96' width='96'/>                                                              
                                                    
                                        <img width="832" height="451" src="https://www.netspi.com/wp-content/uploads/021623_AbusingAzure-Blog_Feature.jpg" alt="">                                  
                                    
                                                            Technical Blog
                                                        
                                                            Cloud Penetration Testing
                                                        
February 16, 2023
Pivoting with Azure Automation Account Connections
                                                    
                                                            <img data-del="avatar" src='https://www.netspi.com/wp-content/uploads/Karl-Fosaaen_Web-150x150.jpg' class='avatar pp-user-avatar avatar-96 photo ' height='96' width='96'/>                                                              
                                                    
                                        <img width="832" height="451" src="https://www.netspi.com/wp-content/uploads/120822_Azure-App-Configurations-Blog_Feature.jpg" alt="">                                  
                                    
                                                            Technical Blog
                                                        
                                                            Cloud Penetration Testing
                                                        
December 8, 2022
How to Gather Azure App Configurations
                                                    
                                                            <img data-del="avatar" src='https://www.netspi.com/wp-content/uploads/Karl-Fosaaen_Web-150x150.jpg' class='avatar pp-user-avatar avatar-96 photo ' height='96' width='96'/>                                                              
                                                    
                                        <img width="832" height="451" src="https://www.netspi.com/wp-content/uploads/041422_Automation-Account-Hybrid-Workers-Part-2-Blog_Feature.jpg" alt="Automation-Account-Hybrid-Workers-Part-2">                                  
                                    
                                                            Technical Blog
                                                        
                                                            Cloud Penetration Testing
                                                        
April 14, 2022
Abusing Azure Hybrid Workers for Privilege Escalation – Part 2: An Azure PrivEsc Story
                                                    
                                                            <img data-del="avatar" alt="Automation-Account-Hybrid-Workers-Part-2" src='https://www.netspi.com/wp-content/uploads/2021/05/Josh-Magri-Headshot-150x150.jpg' class='avatar pp-user-avatar avatar-96 photo ' height='96' width='96'/>                                                              
                                                    
                                        <img width="500" height="271" src="https://www.netspi.com/wp-content/uploads/031722_Abusing-Azure-Hybrid-Workers-Pt1-Blog_Feature-500x271.jpg" alt="Abusing Azure Hybrid Workers for Privilege Escalation – Part 1">                                  
                                    
                                                            Technical Blog
                                                        
                                                            Cloud Penetration Testing
                                                        
March 17, 2022
Abusing Azure Hybrid Workers for Privilege Escalation – Part 1
                                                    
                                                            <img data-del="avatar" alt="Abusing Azure Hybrid Workers for Privilege Escalation – Part 1" src='https://www.netspi.com/wp-content/uploads/Karl-Fosaaen_Web-150x150.jpg' class='avatar pp-user-avatar avatar-96 photo ' height='96' width='96'/>                                                              
                                                    
                                        <img width="500" height="271" src="https://www.netspi.com/wp-content/uploads/030922_Logic-App-Priv-Esc_Tech-Blog_Feature-500x271.jpg" alt="Escalating from Logic App Contributor to Root Owner in Azure">                                  
                                    
                                                            Technical Blog
                                                        
                                                            Cloud Penetration Testing
                                                        
March 9, 2022
Escalating from Logic App Contributor to Root Owner in Azure
                                                    
                                                            <img data-del="avatar" alt="Escalating from Logic App Contributor to Root Owner in Azure" src='https://www.netspi.com/wp-content/uploads/2021/05/Josh-Magri-Headshot-150x150.jpg' class='avatar pp-user-avatar avatar-96 photo ' height='96' width='96'/>                                                              
                                                    
                                        <img width="500" height="271" src="https://www.netspi.com/wp-content/uploads/012722_Extracting-Kubernetes-Passwords-Blog_Feature-500x271.jpg" alt="How To Extract Credentials from Azure Kubernetes Service (AKS)">                                  
                                    
                                                            Technical Blog
                                                        
                                                            Cloud Penetration Testing
                                                        
January 27, 2022
How To Extract Credentials from Azure Kubernetes Service (AKS)
                                                    
                                                            <img data-del="avatar" alt="How To Extract Credentials from Azure Kubernetes Service (AKS)" src='https://www.netspi.com/wp-content/uploads/Karl-Fosaaen_Web-150x150.jpg' class='avatar pp-user-avatar avatar-96 photo ' height='96' width='96'/>