Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

What Is EntraGoat? A Deliberately Vulnerable Entra ID Simulation Environment

semperis.com | blog | #open-source | #ctf | #identity-security | #security-training | #entra-id | #entragoat

Summary

Introducing EntraGoat: an open-source, deliberately vulnerable Entra ID lab that reproduces real-world misconfigurations in CTF form so identity defenders can safely practice attack paths.
Published
Collected

original ↗

Related coverage

blog · semperis.com
Getting Started with EntraGoat: Breaking Entra ID the Smart Way
A quick-start guide to EntraGoat: test tenant, Node.js and PowerShell 7 prerequisites, cloning the lab, launching your first challenge, capturing flags and cleaning up afterwards.
blog · projectblack.io
Should I Azure AD Sync/Entra Cloud Sync Domain Admins?
Syncing Domain Admins into Entra ID lets attackers pivot from compromised on-prem AD to the cloud, and back via password writeback. CIS and Microsoft advise keeping privileged admin accounts cloud-only.
blog · hackenproof.com
HackenProof, in Partnership with Hack The Box—the Four Million Platform—Has Launched a CTF Security Challenge for the Blockchain Industry
HackenProof and Hack The Box turn blockchain security into a gamified CTF track with weekly challenges and a ten-quest series, giving top performers a path into the bug bounty ecosystem.
blog · hackenproof.com
HackenProof, in Partnership with Hack The Box—the Four Million Platform—Has Launched a Course for the Blockchain Industry
HackenProof has launched a blockchain-industry course with Hack The Box, the four-million-member ethical hacking platform, aimed at building practical blockchain security skills.
blog · wiz.io
How to Spot and Stop Rogue Device Joins
Nearly one in seven Entra ID environments saw rogue device registrations in 90 days, Wiz finds; attackers abuse DRS via device-code phishing, and AI-realistic device names erode old fingerprints.
blog · wiz.io
3 OAuth TTPs Seen This Month — and How to Detect Them with Entra ID Logs
Three OAuth techniques attackers use in Azure, and how Entra ID sign-in logs and JWT claims expose them; includes Wiz telemetry on prevalence and ready-to-use KQL detection queries.
back