Blyth A. - Penetration Testing on Azure [2026, EPUB, ENG] [TorrentX]

Penetration Testing on AzureГод издания: 2026 Автор: Blyth A.Издательство: BPB Publications ISBN: 978-93-65895-209 Язык: АнглийскийФормат: EPUB Качество: Издательский макет или текст (eBook) Интерактивное оглавление: Да Количество страниц: 503Описание: In the cyber world, securing the cloud is critical to an organization’s business success. This book is about equipping the readers with the required knowledge and skills to perform a penetration test against an Azure infrastructure. Within this book, the readers will develop a detailed understanding of what Azure is and how its core component functions, along with the ability to uncover vulnerabilities, develop and deploy proof-of-concept exploits. This book systematically guides you through the technical workflow, beginning with cloud architecture and legal considerations, followed by threat intelligence and reconnaissance to map the attack surface. You immediately pivot to high-value targets, learning to exploit Azure AD for privilege escalation, auditing NSGs/VPNs for networking flaws, and attacking compute services. Finally, you will learn specialized testing of API Management, Key Vault access controls, bypassing security/monitoring services, simulating advanced threat scenarios and lateral movement, and concluding with professional reporting and remediation for continuous security improvement. By the end of this book, you will have all the necessary knowledge to successfully conduct a penetration test against an Azure infrastructure. You will learn how to not only specify a penetration test, but also how to communicate your findings and understand what the Azure components are, and how they fit together. You will also have the ability to develop and validate proof-of-concept exploits. What you will learn: - Specifying and performing penetration test against an Azure infrastructure. - Using threat intelligence in the specification process. - Compromising Azure DevOps CI/CD Pipeline, Secrets Management, and Build Artifacts. - Developing and validating proof-of-concept exploits using Python. - Reporting and communicating the findings to the customer. - Conducting red team lateral movement, APT simulation, and Zero Trust testing. - Securing blob storage/SAS tokens. - Exploiting vulnerabilities in App Services/serverless and SQL/NoSQL databases. Примеры страниц (скриншоты) Оглавление 1. Introduction to Penetra