Extracting All the Azure Passwords: MicroBurst & Cloud Recon

The Expanding Attack Surface in Microsoft Azure

As enterprises migrate mission-critical applications to Azure, developers often leave administrative credentials and API keys stored across distributed cloud services.

Automating Azure Reconnaissance with MicroBurst

Karl Fosaaen introduces updates to MicroBurst, a PowerShell toolkit designed for automated Azure subscription enumeration, privilege escalation, and credential discovery.

Dumping Secrets Across Azure Services

Fosaaen demonstrates extracting plaintext passwords from Azure Automation Runbooks, Key Vaults, App Service configuration strings, and Virtual Machine user-data scripts.

Securing Azure Credentials with Managed Identities

The author advises cloud architects on migrating away from hardcoded secrets by implementing Azure Managed Identities and strict RBAC on Key Vaults.