Azure Services - Storage Blob

• Blobs - *.blob.core.windows.net
• File Services - *.file.core.windows.net
• Data Tables - *.table.core.windows.net
• Queues - *.queue.core.windows.net

Enumerate blobs

PS > . C:\Tools\MicroBurst\Misc\InvokeEnumerateAzureBlobs.ps1
PS > Invoke-EnumerateAzureBlobs -Base <SHORT DOMAIN> -OutputFile azureblobs.txt
Found Storage Account -  redacted.blob.core.windows.net

List and download blobs

PS Az> Get-AzResource
PS Az> Get-AzStorageAccount -name <NAME> -ResourceGroupName <NAME>
PS Az> Get-AzStorageContainer -Context (Get-AzStorageAccount -name <NAME> -ResourceGroupName <NAME>).context
PS Az> Get-AzStorageBlobContent -Container <NAME> -Context (Get-AzStorageAccount -name <NAME> -ResourceGroupName <NAME>).context -Blob

Retrieve exposed containers with public access

PS Az> (Get-AzStorageAccount | Get-AzStorageContainer).cloudBlobContainer | select Uri,@{n='PublicAccess';e={$_.Properties.PublicAccess}}

SAS URL

• Use Storage Explorer
• Click on Open Connect Dialog in the left menu.
• Select Blob container.
• On the Select Authentication Method page
  • Select Shared access signature (SAS) and click on Next
  • Copy the URL in Blob container SAS URL field.

You can also use subscription(username/password) to access storage resources such as blobs and files.

References

Share this content