Exploiting Azure applications

Now, let’s run some security tests with the tools we’ve installed.

Prowler

First, let’s run a default Prowler scan in Azure. The default scan is an effective general vulnerability assessment. Follow these steps:

1. Launch Azure Cloud Shell and make sure you’re using Bash. At the top left of the Azure Cloud Shell display, there’s a drop-down menu to switch back and forth between PowerShell and Bash. There you go!
2. I like to just make sure that Prowler is installed properly before I commence a scan. Check the version of Prowler you have with this command:

   prowler -v

3. Next, let’s see which security checks you can run with Prowler in Azure with this command:

   prowler azure --list-checks

4. Now, let’s run some of the checks that were listed as a response to the previous command. Make sure --az-cli-auth is at the end of your prowler azure command so that you can execute it with the necessary permissions...