Back to directory
WRITEUP #1552

Abusing Azure App Service Managed Identity Assignments

Cloud
by@_wald0(Andy Robbins)
Program
Microsoft (Azure)
Published
Feb 15, 2023
Added to HackDex
Feb 22, 2023
Read Full Writeuphttps://posts.specterops.io/abusing-azure-app-service-managed-identity-assignments-c3adefccff95
RELATED WRITEUPS
The Hunt for ALBeast: A Technical Walkthrough
CloudAWS ALB
Addressed AWS defaults risks: OIDC, Terraform and Anonymous to AdministratorAccess
CloudOIDC
Double Agent: Exploiting Pass-through Authentication Credential Validation in Azure AD
CloudPrivilege escalation
Bucket Monopoly: Breaching AWS Accounts Through Shadow Resources
CloudRCE
UnOAuthorized: Privilege Elevation Through Microsoft Applications
CloudPrivilege escalation

Built with ❤️ by Shubham Rawat