Azure Penetration Testing Learning Roadmap
Complete SC-900: Microsoft Security, Compliance, and Identity Fundamentals
Finish PwnedLabs Hands-On Labs
- Azure Blob Container to Initial Access
- Intro to Azure Recon with BloodHound
- Unlock Access with Azure Key Vault
- Loot Exchange, Teams, and SharePoint with GraphRunner
- Unmask Privileged Access in Azure
- Azure Recon to Foothold and Profit
- Bypass Azure Web App Authentication with Path Traversal
- Execute Azure Credential Shuffle to Achieve Objectives
- Phished for Initial Access
- Exploit SQL Injection in Azure Function App
- Passwordless Credentials for Access and Escalation
- Abuse Dynamic Groups in Entra ID for Privilege Escalation
- Bypass Azure MFA with Evilginx
Read "Penetration Testing Azure for Ethical Hackers"
Pursue Additional Certifications
- AZ-104: Microsoft Azure Administrator
- AZ-500: Microsoft Azure Security Technologies
- AZ-303/304: Microsoft Azure Architect Technologies/Design
Pursue Pentest Practical Certifications
- CARTP - Altered Security
- Attacking and Defending Azure & M365 - XINTRA
- MCRTP - PwnedLabs
- Build Your Portfolio