From e47fdfb9ead1b254c70d03d4e2a08940500a87f5 Mon Sep 17 00:00:00 2001 From: Jimmy Date: Sun, 12 Jan 2025 11:55:13 +0100 Subject: [PATCH] Update pwsh --- .../az-services/az-app-services.md | 46 +++++++++++++++- .../az-services/az-function-apps.md | 26 +++++++++ .../az-services/az-servicebus-enum.md | 54 ++++++++++++++++++ .../az-services/az-static-web-apps.md | 55 +++++++++++++++++++ .../az-services/az-table-storage.md | 2 + 5 files changed, 182 insertions(+), 1 deletion(-) diff --git a/src/pentesting-cloud/azure-security/az-services/az-app-services.md b/src/pentesting-cloud/azure-security/az-services/az-app-services.md index 0b4bd63ae..bd84162ca 100644 --- a/src/pentesting-cloud/azure-security/az-services/az-app-services.md +++ b/src/pentesting-cloud/azure-security/az-services/az-app-services.md @@ -186,12 +186,56 @@ az webapp hybrid-connections list --name --resource-group {{#tab name="Az Powershell" }} ```powershell +Get-Command -Module Az.Websites + # Get App Services and Function Apps Get-AzWebApp # Get only App Services Get-AzWebApp | ?{$_.Kind -notmatch "functionapp"} -``` +# Retrieves details of a specific App Service Environment in the specified resource group. +Get-AzAppServiceEnvironment -ResourceGroupName -Name +# Retrieves the access restriction configuration for a specified Web App. +Get-AzWebAppAccessRestrictionConfig -ResourceGroupName -Name +# Retrieves the SSL certificates for a specified resource group. +Get-AzWebAppCertificate -ResourceGroupName +# Retrieves the continuous deployment URL for a containerized Web App. +Get-AzWebAppContainerContinuousDeploymentUrl -ResourceGroupName -Name +# Retrieves the list of continuous WebJobs for a specified Web App. +Get-AzWebAppWebJob -ResourceGroupName -AppName +# Retrieves the list of triggered WebJobs for a specified Web App. +Get-AzWebAppTriggeredWebJob -ResourceGroupName -AppName + +# Retrieves details of a deleted Web App in the specified resource group. +Get-AzDeletedWebApp -ResourceGroupName -Name +# Retrieves a list of snapshots for a specified Web App. +Get-AzWebAppSnapshot -ResourceGroupName -Name +# Retrieves the history of a specific triggered WebJob for a Web App. +Get-AzWebAppTriggeredWebJobHistory -ResourceGroupName -AppName -Name + +# Retrieves information about deployment slots for a specified Web App. +Get-AzWebAppSlot -ResourceGroupName -Name +# Retrieves the continuous WebJobs for a specific deployment slot of a Web App. +Get-AzWebAppSlotWebJob -ResourceGroupName -AppName -SlotName +# Retrieves the triggered WebJobs for a specific deployment slot of a Web App. +Get-AzWebAppSlotTriggeredWebJob -ResourceGroupName -AppName -SlotName +# Retrieves the history of a specific triggered WebJob for a deployment slot of a Web App. +Get-AzWebAppSlotTriggeredWebJobHistory -ResourceGroupName -AppName -SlotName -Name +# Retrieves the continuous WebJobs for a Web App. +Get-AzWebAppContinuousWebJob -ResourceGroupName -AppName +# Retrieves the continuous WebJobs for a specific deployment slot of a Web App. +Get-AzWebAppSlotContinuousWebJob -ResourceGroupName -AppName -SlotName + +# Retrieves the traffic routing rules for a Web App. +Get-AzWebAppTrafficRouting -ResourceGroupName -WebAppName -RuleName + +# Retrieves details of a specific backup for a Web App. +Get-AzWebAppBackup -ResourceGroupName -Name -BackupId +# Retrieves the backup configuration for a Web App. +Get-AzWebAppBackupConfiguration -ResourceGroupName -Name +# Retrieves the list of all backups for a Web App. +Get-AzWebAppBackupList -ResourceGroupName -Name +``` {{#endtab }} {{#tab name="az get all" }} diff --git a/src/pentesting-cloud/azure-security/az-services/az-function-apps.md b/src/pentesting-cloud/azure-security/az-services/az-function-apps.md index 1c37462ef..f7610ce28 100644 --- a/src/pentesting-cloud/azure-security/az-services/az-function-apps.md +++ b/src/pentesting-cloud/azure-security/az-services/az-function-apps.md @@ -207,6 +207,9 @@ Moreover, **no source code will be stored in the storage** account related to th ## Enumeration +{% tabs %} +{% tab title="az cli" %} +{% code overflow="wrap" %} ```bash # List all the functions az functionapp list @@ -252,6 +255,29 @@ curl "https://newfuncttest123.azurewebsites.net/admin/vfs/home/site/wwwroot/func # Get source code az rest --url "https://management.azure.com//resourceGroups//providers/Microsoft.Web/sites//hostruntime/admin/vfs/function_app.py?relativePath=1&api-version=2022-03-01" ``` +{% endcode %} +{% endtab %} + +{% tab title="Az PowerShell" %} +{% code overflow="wrap" %} +```powershell +Get-Command -Module Az.Functions + +# Lists all Function Apps in the current subscription or in a specific resource group. +Get-AzFunctionApp -ResourceGroupName + +# Displays the regions where Azure Function Apps are available for deployment. +Get-AzFunctionAppAvailableLocation + +# Retrieves details about Azure Function App plans in a subscription or resource group. +Get-AzFunctionAppPlan -ResourceGroupName -Name + +# Retrieves the app settings for a specific Azure Function App. +Get-AzFunctionAppSetting -Name -ResourceGroupName +``` +{% endcode %} +{% endtab %} +{% endtabs %} ## Privilege Escalation diff --git a/src/pentesting-cloud/azure-security/az-services/az-servicebus-enum.md b/src/pentesting-cloud/azure-security/az-services/az-servicebus-enum.md index 6e74cc914..1626ccb39 100644 --- a/src/pentesting-cloud/azure-security/az-services/az-servicebus-enum.md +++ b/src/pentesting-cloud/azure-security/az-services/az-servicebus-enum.md @@ -51,6 +51,9 @@ sku, authrorization rule, ### Enumeration +{% tabs %} +{% tab title="az cli" %} +{% code overflow="wrap" %} ```bash # Queue Enumeration az servicebus queue list --resource-group --namespace-name @@ -78,6 +81,57 @@ az servicebus queue authorization-rule list --resource-group - az servicebus topic authorization-rule list --resource-group --namespace-name --topic-name az servicebus namespace authorization-rule keys list --resource-group --namespace-name --name ``` +{% endcode %} +{% endtab %} + +{% tab title="Az PowerShell" %} +{% code overflow="wrap" %} +```powershell +Get-Command -Module Az.ServiceBus + +# Retrieves details of a Service Bus namespace, including V2-specific features like additional metrics or configurations. +Get-AzServiceBusNamespaceV2 -ResourceGroupName -Name + +# Retrieves the authorization rules for a Service Bus namespace, queue, or topic. +Get-AzServiceBusAuthorizationRule -ResourceGroupName -NamespaceName + +# Retrieves the Geo-Disaster Recovery configuration for a Service Bus namespace, if it is enabled. +Get-AzServiceBusGeoDRConfiguration -ResourceGroupName -NamespaceName + +# Retrieves the shared access keys for a specified authorization rule in a Service Bus namespace. +Get-AzServiceBusKey -ResourceGroupName -NamespaceName -Name + +# Retrieves the migration state and details for a Service Bus namespace, if a migration is in progress. +Get-AzServiceBusMigration -ResourceGroupName -NamespaceName + +# Retrieves properties and details about a Service Bus namespace. +Get-AzServiceBusNamespace -ResourceGroupName -Name + +# Retrieves the network rule set for a Service Bus namespace, such as IP restrictions or virtual network access rules. +Get-AzServiceBusNetworkRuleSet -ResourceGroupName -NamespaceName + +# Retrieves private endpoint connections for a Service Bus namespace. +Get-AzServiceBusPrivateEndpointConnection -ResourceGroupName -NamespaceName + +# Retrieves private link resources associated with a Service Bus namespace. +Get-AzServiceBusPrivateLink -ResourceGroupName -NamespaceName + +# Retrieves details of a specified queue in a Service Bus namespace. +Get-AzServiceBusQueue -ResourceGroupName -NamespaceName -Name + +# Retrieves rules (filters and actions) for a subscription under a Service Bus topic. +Get-AzServiceBusRule -ResourceGroupName -NamespaceName -TopicName -SubscriptionName + +# Retrieves details of subscriptions for a specified Service Bus topic. +Get-AzServiceBusSubscription -ResourceGroupName -NamespaceName -TopicName + +# Retrieves details of a specified topic in a Service Bus namespace. +Get-AzServiceBusTopic -ResourceGroupName -NamespaceName +``` +{% endcode %} +{% endtab %} +{% endtabs %} + ### Privilege Escalation diff --git a/src/pentesting-cloud/azure-security/az-services/az-static-web-apps.md b/src/pentesting-cloud/azure-security/az-services/az-static-web-apps.md index 1576b65e9..9178d7b0d 100644 --- a/src/pentesting-cloud/azure-security/az-services/az-static-web-apps.md +++ b/src/pentesting-cloud/azure-security/az-services/az-static-web-apps.md @@ -84,6 +84,9 @@ For more info you can find an Azure guide use a vault secret in a static app in ## Enumeration +{% tabs %} +{% tab title="az cli" %} +{% code overflow="wrap" %} ```bash # List Static Webapps az staticwebapp list --output table @@ -115,6 +118,58 @@ az rest --method POST \ # Check connected backends az staticwebapp backends show --name --resource-group ``` +{% endcode %} +{% endtab %} + +{% tab title="Az PowerShell" %} +{% code overflow="wrap" %} +```powershell +Get-Command -Module Az.Websites + +Get-AzStaticWebApp -ResourceGroupName -Name +Get-AzStaticWebAppBuild -ResourceGroupName -Name +Get-AzStaticWebAppBuildAppSetting -ResourceGroupName -Name -EnvironmentName +Get-AzStaticWebAppBuildFunction -ResourceGroupName -Name -EnvironmentName +Get-AzStaticWebAppBuildFunctionAppSetting +Get-AzStaticWebAppConfiguredRole +Get-AzStaticWebAppCustomDomain +Get-AzStaticWebAppFunction +Get-AzStaticWebAppFunctionAppSetting +Get-AzStaticWebAppSecret +Get-AzStaticWebAppSetting +Get-AzStaticWebAppUser +Get-AzStaticWebAppUserProvidedFunctionApp +Get-AzWebAppContinuousWebJob +Get-AzWebAppSlotContinuousWebJob +Get-AzWebAppSlotTriggeredWebJob +Get-AzWebAppSlotTriggeredWebJobHistory +Get-AzWebAppSlotWebJob +Get-AzWebAppTriggeredWebJob +Get-AzWebAppTriggeredWebJobHistory +Get-AzWebAppWebJob + +Get-AzAppServiceEnvironment +Get-AzAppServicePlan +Get-AzDeletedWebApp +Get-AzWebApp +Get-AzWebAppAccessRestrictionConfig +Get-AzWebAppBackup +Get-AzWebAppBackupConfiguration +Get-AzWebAppBackupList +Get-AzWebAppCertificate +Get-AzWebAppContainerContinuousDeploymentUrl +Get-AzWebAppPublishingProfile +Get-AzWebAppSlot +Get-AzWebAppSlotConfigName +Get-AzWebAppSlotPublishingProfile +Get-AzWebAppSnapshot +Get-AzWebAppSSLBinding +Get-AzWebAppTrafficRouting +``` +{% endcode %} +{% endtab %} +{% endtabs %} + ## Examples to generate Web Apps diff --git a/src/pentesting-cloud/azure-security/az-services/az-table-storage.md b/src/pentesting-cloud/azure-security/az-services/az-table-storage.md index 34321db65..202f2648a 100644 --- a/src/pentesting-cloud/azure-security/az-services/az-table-storage.md +++ b/src/pentesting-cloud/azure-security/az-services/az-table-storage.md @@ -72,6 +72,8 @@ Get-AzStorageAccount # List tables Get-AzStorageTable -Context (Get-AzStorageAccount -Name -ResourceGroupName ).Context + +Get-AzStorageTableStoredAccessPolicy -Table -Context (Get-AzStorageAccount -Name ).Context ``` {{#endtab}}