# Blob Storage

# General

List all storage accounts and output in a table format:

```
az storage account list -o table
```

List all storage accounts and get storage account names:

```
az storage account list -o json | jq -r '.[].name'
```

You can assign one of the account names to an env var if you’d like:

```
export AZURE_STORAGE_ACCOUNT=<storage account name from output>
```

# Get storage keys

If you set the env var:

```
az storage account keys list -n $AZURE_STORAGE_ACCOUNT
```

You can assign one of the keys to an env var if you’d like:

```
export AZURE_STORAGE_KEY='<your key from the output of the previous command>'
```

# List storage containers

```powershell
az storage container list --account-name $AZURE_STORAGE_ACCOUNT --account-key "$AZURE_STORAGE_KEY"
```

# List storage container contents

```
az storage blob list --container-name <name of storage container from previous command> --account-name $AZURE_STORAGE_ACCOUNT --account-key $AZURE_STORAGE_KEY
```

Resource: [https://www.secsignal.org/en/news/how-i-hacked-a-domain-controller-in-azure-during-a-penetration-test/](https://www.secsignal.org/en/news/how-i-hacked-a-domain-controller-in-azure-during-a-penetration-test/)

# List blob names

```powershell
az storage blob list --container-name <name of storage container from previous command> --account-name $AZURE_STORAGE_ACCOUNT --account-key $AZURE_STORAGE_KEY | jq '.[].name'
```