Keeping up with current Azure infrastructure requires maintaining current with security tools. Other than the most basic level of service, every computer network requires at least basic level of service. This article covers some of the key tools associated with Azure Penetration Testing.

1. Microburst

Microburst is a PowerShell toolkit designed for testing and auditing Microsoft Azure environments. Identifies misconfigured roles, storage accounts, and other resources.

2. Azucar

An Azucar command-line tool provides a limited semi-detailed analysis overview by subscription level of Azure security subscriptions that contain considerable security vulnerabilities.

3. Storm spotter

Microsoft developed Storm spotter for visualizing the attack surface of azure environment. Its main use is performing attack surface visualization.

4. Mimi Katz + LSASS Dumping (in Azure VMs)

These tools are Mimi Katz and LSASS Dumping. While these are not specific to Azure , they are commonly used for testing machines hosted on Azure.

5. Burp Suite

This tool is useful for pen testing web applications hosted on Azure for injection vulnerabilities, broken authentication, and various other OWASP Top 10 vulnerabilities.

Conclusion

Using the appropriate tools for Azure penetration testing is focused, and not aimless. When used correctly, tools can give you an advantage against cloud-based attackers.