Unlock Access for lateral movement via Azure KeyVault to confidential information.

Getting Initial Access via Phishing NTLMv2 hashes and abusing them for lateral movement.

Abusing leaked credentials for enumerating Azure environment to gain a foothold and extract sensitive information.

Writeup for the 3rd flag (An Absent Defense) in the Thunderdome Cyber Range from PwnedLabs

Writeup for the 2nd flag (Pulled from the sky) in the Thunderdome Cyber Range from PwnedLabs

Writeup for the 1st flag (Emerge through the breach) in the Thunderdome Cyber Range from PwnedLabs

Compromising a publicly accessible Azure Blob Storage to gain initial access into an enterprise environment.