Using compromised Azure credentials, we deploy BloodHound to map the environment and discover role assignments. By enumerating custom security attributes via PowerShell and inspecting VM user data, we uncover hardcoded credentials leading to further access escalation.

This lab walks through abusing overshared social media information and insecure Azure Logic App automation to gain initial access, escalate privileges, and compromise an M365 environment.

A public Azure Blob container hosting a corporate website exposes versioned files. By enumerating blob versions via the REST API, we discover and retrieve a deleted PowerShell script archive containing hardcoded credentials for both Azure AD and Active Directory admin accounts.