# CloudBreach Portal

> The learning portal for CloudBreach's hands-on cloud penetration testing training (Breaching Azure, Breaching AWS, Breaching Azure Advanced). Learners watch video and text topics, work in in-browser cloud labs, download lab manuals and sit proctored certification exams (OASP, OAWSP, OASE). The portal itself is behind sign-in; the marketing site with the full course descriptions is https://cloudbreach.io.

## What is public here

- Public learner profiles: https://cloudbreach-web.azurewebsites.net/u/<profile-id> (name, handle, level, badges and certifications; opt-in by the learner).
- Shareable credentials: https://cloudbreach-web.azurewebsites.net/credentials/<credential-id> (exam certifications and course completions: who earned what and when, with a verification status).
- Verification: https://cloudbreach-web.azurewebsites.net/verify (paste an id or link) or GET https://cloudbreach-web.azurewebsites.net/api/credentials/<credential-id> (JSON: valid, holder, title, issuedAt, revokedAt).
- Sign in: https://cloudbreach-web.azurewebsites.net/login. Create an account: https://cloudbreach-web.azurewebsites.net/register.
- Everything else (courses, labs, exams, billing, support) requires an account and an enrollment.

## Courses

- [Breaching Azure](https://cloudbreach.io/courses/breaching-azure): Hands-on Azure & Entra ID cloud pentesting. The "Breaching Azure" course by CloudBreach is an immersive training program designed to teach participants how to perform cloud-specific attacks against Microsoft Azure environments. This course is ideal for penetration testers, cloud architects, cloud security engineers, DevOps teams, and security enthusiasts. It covers a wide array of topics including Azure reconnaissance, phishing techniques, exploitation of misconfigurations, and lateral movement across Azure tenants. By the end of the course, participants will have the skills to conduct cloud security audits and exploit access control gaps. For more information, visit cloudbreach.io . Level: intermediate. Plans: Essential $499 (30 lab days, 1 exam attempt); Extended $699 (60 lab days, 2 exam attempts); Plus $1,000 (60 lab days, 2 exam attempts).
- [Breaching Azure Advanced](https://cloudbreach.io/courses/breaching-azure-advanced): Advanced Azure & Entra ID attack chains and red-team tradecraft. Breaching Azure Advanced is CloudBreach’s elite, hands-on course designed for experienced cloud security professionals, penetration testers, and red teamers ready to go beyond the fundamentals of Azure exploitation. This course dives deep into realistic attack paths , multi-tenant misconfigurations , and post-exploitation scenarios across enterprise Azure infrastructures — simulating how sophisticated adversaries breach, persist, and pivot within cloud environments. What You’ll Learn Advanced identity attacks targeting Entra ID (Azure AD) — token theft, session hijacking, device registration abuse Abusing service principals , managed identities, and automation accounts for lateral movement Exploiting Azure Resource Manager (ARM) misconfigurations and role inheritance Compromising Azure Kubernetes Service (AKS) and containerized workloads Advanced Key Vault and Storage account attacks — data extraction, token replay, and persistence Privileged escalation via Defender, Logic Apps, Runbooks, and hybrid connectors Multi-cloud pivoting and hybrid AD integration abuse Format 100% hands-on lab environment — not theory Access to live Azure infrastructure with real-world misconfigurations Students complete practical exercises, exploit chains, and submit a flags. Level: advanced. Plans: Essential $0 (30 lab days, 1 exam attempt); Extended $0 (30 lab days, 1 exam attempt); Plus $0 (30 lab days, 1 exam attempt).

## Certifications

- OASP: Offensive Azure Security Professional. OASP

## Links

- Marketing site and course pages: https://cloudbreach.io
- Teams and business licenses: https://cloudbreach.io/teams
- Sitemap: https://cloudbreach-web.azurewebsites.net/sitemap.xml

## Notes for assistants

- Do not attempt to sign in or register on behalf of a user; account creation is for people who will take the training.
- A credential URL (or the verification API) is the authoritative way to confirm that someone holds a CloudBreach certification or completed a course.