From b26859200f420c0b26aed3a663dbb55b5312fca2 Mon Sep 17 00:00:00 2001 From: Shantanu Kale Date: Mon, 19 Sep 2022 17:56:01 +0530 Subject: [PATCH] Add AzureGoat --- cloud/AzureGoat.md | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100644 cloud/AzureGoat.md diff --git a/cloud/AzureGoat.md b/cloud/AzureGoat.md new file mode 100644 index 0000000..59a73b5 --- /dev/null +++ b/cloud/AzureGoat.md @@ -0,0 +1,28 @@ +# AzureGoat + +### Description +Compromising an organization's cloud infrastructure is like sitting on a gold mine for attackers. And sometimes, a simple misconfiguration or a vulnerability in web applications, is all an attacker needs to compromise the entire infrastructure. Since the cloud is relatively new, many developers are not fully aware of the threatscape and they end up deploying a vulnerable cloud infrastructure. Microsoft Azure cloud has become the second-largest vendor by market share in the cloud infrastructure providers (as per multiple reports), just behind AWS. There are numerous tools and vulnerable applications available for AWS for the security professional to perform attack/defense practices, but it is not the case with Azure. There are far fewer options available to the community. + +AzureGoat is a vulnerable by design infrastructure on Azure featuring the latest released OWASP Top 10 web application security risks (2021) and other misconfiguration based on services such as App Functions, CosmosDB, Storage Accounts, Automation and Identities. AzureGoat mimics real-world infrastructure but with added vulnerabilities. It features multiple escalation paths and is focused on a black-box approach. + +### Categories +* Cloud Security +* Serverless Application Security + +### Black Hat sessions +[![Arsenal](https://raw.githubusercontent.com/toolswatch/badges/master/arsenal/usa/2022.svg)](https://www.blackhat.com/us-22/arsenal/schedule/index.html#azuregoat--a-damn-vulnerable-azure-infrastructure-28000) + +### Code +https://github.com/ine-labs/AzureGoat + +### Lead Developers +* Nishant Sharma - INE https://github.com/nishantsharmax +* Jeswin Mathai - INE https://github.com/jeswinMathai +* Sherin Stephen - INE https://github.com/sherinsteph +* Rachna Umaraniya - INE https://github.com/Rachnaumaraniya +* Shantanu Kale - INE https://github.com/SSKale1 +* Sanjeev Mahunta - INE https://github.com/s-mahunta + +### Social Media +* [Twitter](https://twitter.com/ine) +* [Company Website](https://ine.com/)