AHHHZURE is an automated deployment script that creates vulnerable Azure cloud environments for security testing and training purposes. The tool sets up intentionally misconfigured Azure resources and services to provide hands-on learning opportunities for offensive security practitioners. It automates the provisioning of cloud infrastructure with known security weaknesses and vulnerabilities. The script enables security professionals to practice cloud penetration testing techniques in a controlled environment. It creates various Azure services with common misconfigurations that mirror real-world security issues found in cloud deployments. AHHHZURE serves as a training platform for understanding Azure security concepts, attack vectors, and exploitation techniques. The tool helps practitioners develop skills in cloud security assessment and offensive security methodologies specific to Microsoft Azure environments.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
A command line tool that generates randomized malleable C2 profiles for Cobalt Strike to vary command and control communication patterns.
SharpEDRChecker scans system components to detect security products and tools.
SauronEye helps in identifying files containing sensitive data such as passwords through targeted directory searches.
Tool for enumerating proxy configurations and generating CobaltStrike-compatible shellcode.
A digital archive of the internet, allowing users to capture and browse archived web pages.
A command that builds and executes command lines from standard input, allowing for the execution of commands with multiple arguments.
An Azure Function that validates and relays Cobalt Strike beacon traffic based on Malleable C2 profile authentication.
PyBOF is a Python library that enables in-memory loading and execution of Beacon Object Files (BOFs) with support for argument passing and function targeting.
A suite of tools for Wi-Fi network security assessment and penetration testing.
PINNED

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.