> For the complete documentation index, see [llms.txt](https://www.xtormin.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.xtormin.com/pentesting-en-infraestructuras/cloud/azure/herramientas.md).

# Herramientas

## <mark style="color:red;">Herramientas de Microsoft</mark>

### AzureAD <a href="#microsoft-graph-powershell-overview" id="microsoft-graph-powershell-overview"></a>

<https://learn.microsoft.com/es-es/powershell/module/azuread/?view=azureadps-2.0>

{% content-ref url="/pages/1V7K8MW53N3XU5zCKchm" %}
[AzureAD](/pentesting-en-infraestructuras/cloud/azure/metodologia-de-azure-pentest/reconocimiento-interno/enum-con-herramientas-de-ms/azuread.md)
{% endcontent-ref %}

### Az Powershell <a href="#microsoft-graph-powershell-overview" id="microsoft-graph-powershell-overview"></a>

<https://learn.microsoft.com/es-es/powershell/azure/new-azureps-module-az?view=azps-12.0.0>

{% content-ref url="/pages/QK2HmkujZ9HCnnFBQMHN" %}
[Az Powershell](/pentesting-en-infraestructuras/cloud/azure/metodologia-de-azure-pentest/reconocimiento-interno/enum-con-herramientas-de-ms/az-powershell.md)
{% endcontent-ref %}

### Az Cli <a href="#microsoft-graph-powershell-overview" id="microsoft-graph-powershell-overview"></a>

<https://learn.microsoft.com/es-es/cli/azure/install-azure-cli>

{% content-ref url="/pages/SvLXnKt2fCINMMTcKT4W" %}
[Az Cli](/pentesting-en-infraestructuras/cloud/azure/metodologia-de-azure-pentest/reconocimiento-interno/enum-con-herramientas-de-ms/az-cli.md)
{% endcontent-ref %}

### Microsoft Graph PowerShell <a href="#microsoft-graph-powershell-overview" id="microsoft-graph-powershell-overview"></a>

<https://learn.microsoft.com/en-us/powershell/microsoftgraph/installation?view=graph-powershell-1.0>

```powershell
Install-Module Microsoft.Graph -Scope CurrentUser
```

### MS Portals

<https://msportals.io/>

## <mark style="color:red;">Otras Herramientas</mark>

### ScoutSuite

<pre class="language-powershell"><code class="lang-powershell">git clone "https://github.com/nccgroup/ScoutSuite.git"
<strong>python -m venv venv
</strong>.\venv\Scripts\activate
python -m pip install -r requirements.txt
</code></pre>

### AzureRA <a href="#microsoft-graph-powershell-overview" id="microsoft-graph-powershell-overview"></a>

Interactúa con la REST API de Azure y MSGraph para realizar consultas usando tokens (ARM, MSGraph).

```powershell
git clone "https://github.com/xtormin/PowerPentest.git"
cd PowerPentest/Azure/AzureRA
Import-Module .\AzureRA.psm1
```

### AzureRT <a href="#microsoft-graph-powershell-overview" id="microsoft-graph-powershell-overview"></a>

<https://github.com/mgeeky/AzureRT>

```powershell
git clone "https://github.com/mgeeky/AzureRT.git"
Import-Module C:\Pentest\Tools\AzureRT\AzureRT.ps1
```

### ADDInternals

```powershell
# Clonar el repositorio e importar el módulo
git clone "https://github.com/Gerenios/AADInternals.git"
cd AADInternals
Import-Module .\AADInternals.psd1 -Verbose
```

### MicroBust

{% hint style="info" %}
*"MicroBurst incluye funciones y scripts que permiten la enumeración de servicios de Azure, la auditoría de configuraciones débiles y acciones de post-explotación como el volcado de credenciales. Está diseñado para ser utilizado durante pruebas de penetración en entornos donde se utiliza Azure."* – MicroBurst
{% endhint %}

<pre class="language-powershell"><code class="lang-powershell"># Clonar el repositorio e importar el módulo
git clone "https://github.com/NetSPI/MicroBurst.git"
<strong>cd MicroBurst
</strong>Import-Module .\MicroBurst.psm1
</code></pre>

### MSOLSpray

```powershell
# Clonar repositorio e importar el fichero MSOLSpray.ps1
git clone "https://github.com/dafthack/MSOLSpray.git"
cd MSOLSpray
. .\MSOLSpray.ps1
```

### O365EmailValidator

<pre class="language-powershell"><code class="lang-powershell"># Clonar el repositorio e importar el fichero O365EmailValidator.ps1
<strong>git clone "https://github.com/xtormin/PowerPentest.git"
</strong>cd PowerPentest/Azure
. .\O365EmailValidator.ps1
</code></pre>

### ROADTools

> Uso: [#greater-than-roadtools](#greater-than-roadtools "mention")

```powershell
git clone "https://github.com/dirkjanm/ROADtools.git"
python -m venv venv
.\venv\Scripts\activate
```

### StormPotter

> Uso: [#stormpotter](#stormpotter "mention")

```powershell
git clone "https://github.com/Azure/Stormspotter.git"
```

* Opción 1: Docker.

```powershell
docker-compose up
```

* Opción 2: Levantar los servicios en local.

1. Backend:

```powershell
cd "C:\Pentest\Tools\stormspotter\backend\"
pipenv shell
python ssbackend.pyz
```

2. Frontend:

```powershell
cd "C:\Pentest\Tools\stormspotter\frontend\dist\spa\"
quasar.cmd serve -p 9091 --history
```

### AzureHound

<https://github.com/SpecterOps/AzureHound>

Uso: [BloodHound](/pentesting-en-infraestructuras/red-interna/active-directory/bloodhound.md#metodos-de-recoleccion-con-azurehound)

### Prowler

```powershell
git clone "https://github.com/prowler-cloud/prowler.git"
```

### BlobHunter

<pre class="language-powershell"><code class="lang-powershell">git clone "https://github.com/cyberark/BlobHunter.git"
<strong>python -m venv venv
</strong>.\venv\Scripts\activate
python -m pip install -r requirements.txt
</code></pre>

### PowerZure

```powershell
git clone "https://github.com/hausec/PowerZure"
Import-Module C:\Pentest\Tools\PowerZure\PowerZure.psd1
```

### CloudSploit

```powershell
git clone "https://github.com/aquasecurity/cloudsploit.git"
```

### GraphRunner

```powershell
git clone "https://github.com/dafthack/GraphRunner.git"
```

### adconnectdump

```powershell
git clone "https://github.com/dirkjanm/adconnectdump.git"
```