A collection of scripts for assessing Microsoft Azure security - NetSPI/MicroBurst

Continuous Testing

Discover how to decrypt Azure App Services authentication tokens automatically using MicroBurst’s tooling to extract encrypted tokens for security testing.

NetSPI discovered a remote code execution vulnerability in SailPoint IQService using default encryption keys. Exploit details, discovery methods, and remediation guidance included.

A collection of scripts for assessing Microsoft Azure security - NetSPI/MicroBurst

Learn how Azure Load Testing's JMeter JMX and Locust support enables code execution, metadata queries, reverse shells, and Key Vault secret extraction vulnerabilities.

Chris Krebs’, President Donald Trump’s former director of the Cybersecurity and Infrastructure Security Agency, membership in Global Entry has been revoked. Krebs, who has repeatedly attested to the s...

The Get-AzAccessToken cmdlet token output will be switching to a SecureString in version 14.0.0. There are currently several MicroBurst functions that make use of this cmdlet to get tokens. We will...

Abusing Storage Account Permissions to attack Azure Machine Learning notebooks

A collection of scripts for assessing Microsoft Azure security - NetSPI/MicroBurst

Abusing Storage Account Permissions to attack Azure Machine Learning notebooks

Explore the integration of Large Language Models (LLMs) in critical systems and the balance between security and usability with a new LLM benchmarking framework.

Contribute to NetSPI/Open-LLM-Security-Benchmark development by creating an account on GitHub.