Introduction to Azure Penetration Testing
[Altered Security]

Training Ground | 9 February 2025



Training abstract

More than 95 percent of Fortune 500 companies use Azure! Entra ID is one of world's largest identity and access manager. Having the ability to understand and hack (thus securing) Azure is a skill that is in huge demand.

As a leading provider of hands-on learning for enterprise security, we at Altered Security are always trying to make Azure Red Team more accessible in terms of cost and initial learning curve. Drawing from our experience of training more than 30000 security professionals in Enterprise and Azure security, we bring to you "Introduction to Azure Penetration Testing".

Understand and execute attacks in a live lab hosted in Azure. Practice various attack stages like Information gathering, Initial Access, Enumeration, Privilege Escalation and Lateral Movement in the cloud. This our attempt to help students, junior information security professionals or anyone else to break into Azure security and red teaming!

Training Outline

• Overview of Azure adoption and its relevance in the enterprise security landscape
• Introduction to Entra ID as a critical identity and access management platform
• Learn key concepts of Azure security and penetration testing
• Gain hands-on experience with real-world attack scenarios in live Azure labs
• Exploiting vulnerabilities to gain entry into Azure systems
• Methods to elevate access within Azure environments
• Interactive lab hosted in Azure for practicing attack techniques

Who should take this training:

Pentesters, Cloud security professionals, Security architects, Windows administrators, security professionals from IT security or students.

Student Prerequisites:

Basic understanding of Azure
Ability to use command line tools

Vishal Raj

Vishal Raj is an security researcher specializing in cloud security, Red Teaming, and network security. He works as an security researcher at Altered Security - a company focusing on hands-on enterprise security learning - https://www.alteredsecurity.com/
With a strong focus on identifying and exploiting misconfiguration in modern cloud environments, Vishal is passionate about enhancing enterprise security by simulating real-world attack scenarios and providing actionable defense strategies.

In addition to his technical expertise, Vishal actively contributes to the cybersecurity community by writing insightful blogs on a variety of security topics. His writings aim to bridge the gap between theoretical concepts and practical application, empowering others in the field.