A vulnerable Azure architecture that is online 24/7. The environment provides several flags that can be found by exploiting Azure vulnerabilities. This repository contains the source code of the website
- Link to tool is: https://brokenazure.cloud
- File issues at: https://github.com/SecuraBV/brokenbydesign-azure-website/issues
- Link to Terraform source code is: https://github.com/SecuraBV/brokenbydesign-azure
- Created by: https://www.secura.com/
If you would like to add a new challenge path, please note that the first character of the folder name is incremental (first challenge starts with a
, second with b
etc) to keep the folders in the front-end organized. All folders have a length of 26
characters. Please make sure to also change the Backend!
To deploy a new version, all you have to do is:
- Login with the correct credentials using
az login
- Execute
az storage blob upload-batch -s <source-path> -d '$web' --account-name <storage-account-name>
(full commandaz storage blob upload-batch -s src/ -d '$web' --account-name vulnwebsite --overwrite
) - ???
Profit!Done!