Azure | Enumerating Azure Services

Hi!

In this article, I will show you how you can leverage the MicroBurst tool to anonymously enumerating Azure Services.

Please find below a list of DNS suffixes associated with the Azure Services:

DNS SuffixAssociated Azure Service
file.core.windows.netStorage Accounts – Files
blob.core.windows.netStorage Accounts – Blobs
queue.core.windows.netStorage Accounts – Queues
table.core.windows.netStorage Accounts – Tables
azurewebsites.netApp Services and Function app
scm.azurewebsites.netApp Services – Management
database.windows.netDatabases – MSSQL
documents.azure.comDatabases – Cosmos DB
azurecontainer.ioContainer Instances
azurecr.ioContainer Registry
redis.cache.windows.netRedis
azureedge.netCDN
search.windows.netSearch Appliance
azure-api.netAPI Services
cloudapp.azure.comCustomer-assigned public IP DNS
vault.azure.netKey Vault

To conduct this enumeration, we will use the MicroBurst tool.

https://github.com/NetSPI/MicroBurst/blob/master/Misc/Invoke-EnumerateAzureSubDomains.ps1
git clone https://github.com/NetSPI/MicroBurst.git
Import-Module .\MicroBurst.psm1
Invoke-EnumerateAzureSubDomains -Base yourkeyword (you can also add a list of permutations with the parameter -Permutations ".\permutations.txt")

Maxime.

Démarrez une conversation

Votre adresse e-mail ne sera pas publiée.