Security Baseline: Azure Enumeration - Githubissues

null-open-security-community / Cloud-Project

8 stars 2 forks source link

Security Baseline: Azure Enumeration #34

Open 0xCardinal opened 1 year ago

0xCardinal commented 1 year ago

Contributors -

[ ] Saksham (Lead)
[ ] Lok
[ ] Theo

0xCardinal commented 11 months ago

Phase 1

List down the services to be included in the Azure Baseline project.
For each service note down the security controls.

saksham3022 commented 11 months ago

Azure Active Directory

Guest User Collabration Setting
Misconfiguration in Dynamic Group Membership Rules
Privilege Esclation through Azure AD Roles
Privilage Esclation through Azure RBAC Roles
Privilage Esclation through IMDS Explotation

Common_Cloud_Security_Issues_Azure_Edition_Ver_1.0.pdf