Back to directory
WRITEUP #1305

From listKeys to Glory: How We Achieved a Subscription Privilege Escalation and RCE by Abusing Azure Storage Account Keys

CloudPrivilege escalation
by@roinisimi(Roi Nisimi)
Program
Microsoft (Azure)
Published
Apr 11, 2023
Added to HackDex
Apr 15, 2023
Read Full Writeuphttps://orca.security/resources/blog/azure-shared-key-authorization-exploitation/
▸ RELATED WRITEUPS
Addressed AWS defaults risks: OIDC, Terraform and Anonymous to AdministratorAccess
CloudOIDC
Double Agent: Exploiting Pass-through Authentication Credential Validation in Azure AD
CloudPrivilege escalation
UnOAuthorized: Privilege Elevation Through Microsoft Applications
CloudPrivilege escalation
Escalating Privileges in Google Cloud via Open Groups
CloudPrivilege escalation
ConfusedFunction: A Privilege Escalation Vulnerability Impacting GCP Cloud Functions
CloudPrivilege escalation

Built with ❤️ by Shubham Rawat