Skip to content

Commit d175baf

Browse files
authored
Update README with script descriptions and usage
Added descriptions for Get-AzureStorageAnonymousAccess.ps1 and Test-AzureBlobAnonymousEndpoints.ps1 scripts, detailing their functionality and usage.
1 parent 433baea commit d175baf

1 file changed

Lines changed: 16 additions & 0 deletions

File tree

README.md

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -34,6 +34,8 @@ PowerShell-Scripts/
3434
│ └── Audit-NeverSucceedingMailForwardingRules.ps1
3535
│ └── Review-TeamsLifecycleCleanupCandidates.ps1
3636
│ └── Report-InactiveGuestUsers-150Days.ps1
37+
│ └── Get-AzureStorageAnonymousAccess.ps1
38+
│ └── Test-AzureBlobAnonymousEndpoints.ps1
3739
│ └── 👉** Azure AD application auditing tools **
3840
list_all_applications2.ps1
3941
BulkMultiPermExploitability2.ps1
@@ -188,6 +190,20 @@ Send email impersonations, need "Mail.Send" permissions.
188190
Use like so:
189191
`python .\sendmail.py`
190192

193+
---
194+
### `Get-AzureStorageAnonymousAccess.ps1`
195+
196+
This read-only script audits Azure Storage accounts across all subscriptions accessible to the signed-in user. It uses Azure Resource Manager to inspect account settings and container ACLs, classifies effective anonymous access, and exports account-level and container-level CSV reports without requesting storage keys, generating SAS tokens, or changing resources.
197+
198+
---
199+
### `Test-AzureBlobAnonymousEndpoints.ps1`
200+
201+
This script consumes the container CSV generated by Get-AzureStorageAnonymousAccess.ps1 and performs unauthenticated curl.exe tests against each applicable Blob container. It checks anonymous container enumeration and can optionally validate exact-object access using a one-byte range request when the CSV contains an ExactBlobName column.
202+
203+
Use like so:
204+
`.\Test-AzureBlobAnonymousEndpoints.ps1 -InputCsv "C:\Users\mario\StorageContainerPublicAccessDetails-20260730-003512.csv"`
205+
206+
191207
---
192208
### `enum_entra_admins.ps1 & find_disabled_ad_accounts.ps1`
193209

0 commit comments

Comments
 (0)