The AzRTE course is a comprehensive learning experience, which begins with instructor-led guidance covering the basics of Azure. This includes an understanding of the hierarchy of Azure organizations, privilege management, and the concepts of users, resource groups, and managed identities. This will ensure that you grasp the primary structure of Azure accounts.
As you progress, you’ll learn about both fundamental (Entra ID, Key Vault, Storage, etc.) and advanced Azure services (Logic Apps, Azure Functions, Databases, etc.). You’ll understand their functions, how to enumerate them, and how to exploit them as an attacker. This learning will be facilitated through an instructor-led course that provides expert guidance and real-time support, complemented by hands-on labs to reinforce practical skills. For a comprehensive list of Azure services covered in the course, please refer to the course syllabus. With a solid understanding of Azure basics and techniques to compromise various Azure services, you’ll then explore methodologies for different scenarios:
• Whitebox Methodology: Learn the HackTricks methodology for conducting a whitebox Azure assessment. This involves performing a thorough evaluation when given read-only access to a company’s accounts—a frequently requested service among companies.
• BlackBox (Red Team) Methodology: Harness your understanding of Azure services to conduct an external assessment of a company’s Azure setup, escalating privileges wherever possible. Towards the end of the course, you’ll be introduced to common Azure detection services like Microsoft Sentinel and Microsoft Defender. Understand how these services work and learn strategies to bypass them, ensuring stealth during your Red Team assessments. You will practice these techniques in some hands-on labs.
