PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

2025 Red Team Tools – Cloud & Identity Exploitation, Evasion & Developer Libraries

bishopfox.com | blog | #cloud | #cloud-security | #identity-security | #red-team | #security-tools | #credential-attacks | #azure-ad
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

2025 red team roundup part two: cloud and identity tools — AzureHound, ROADtools, AADInternals, GraphRunner, TREVORspray — for mapping cloud privileges, abusing tokens and stealthy password spraying.
Published
Collected

Related coverage

blog · projectblack.io
Should I Azure AD Sync/Entra Cloud Sync Domain Admins?
Syncing Domain Admins into Entra ID lets attackers pivot from compromised on-prem AD to the cloud, and back via password writeback. CIS and Microsoft advise keeping privileged admin accounts cloud-only.
blog · vercel.com
Mitigating Denial of Wallet risks with Vercel
Protect against Denial of Wallet (DoW) attacks with Vercel. DoW exploits cloud scalability to inflate costs. Vercel provides solutions like budget alerts, spend limits, and anomaly detection to safeguard workloads and maintain financial stability.
blog · netspi.com
Abusing Entra ID Misconfigurations to Bypass MFA
NetSPI describes an MFA bypass found in an external assessment: an Entra ID Conditional Access misconfiguration with Duo let attackers reuse an SSO token without any MFA prompt.
blog · vercel.com
Introducing Vercel Firewall and Vercel Secure Compute
Vercel Secure Compute and Vercel Firewall for enhanced protection of your applications on the frontend cloud
blog · semperis.com
Your Zero Trust Strategy Depends on Active Directory Integrity
Zero-trust and cloud IAM adoption (Azure AD, Okta) surged with remote work, but Semperis' Sean Deuby argues these strategies still depend on the integrity of on-premises Active Directory.
blog · semperis.com
Retake Control of Attribute Sync to Azure AD
Azure AD Connect syncs 151 attributes by default and they can't be fully removed later; Semperis' Darren Mar-Elia recommends app, attribute, domain and OU filtering to limit exposure in Azure AD.
Back