WRITEUP #583

Roles allowing to abuse Entra ID federation for persistence and privilege escalation

Privilege Escalation

by@cnotin(Clémentin Notin)

Program

Microsoft (Azure AD)

Published

Jan 9, 2024

Added to HackDex

Jan 18, 2024

Read Full Writeuphttps://medium.com/tenable-techblog/roles-allowing-to-abuse-entra-id-federation-for-persistence-and-privilege-escalation-df9ca6e58360

▸ RELATED WRITEUPS

Vulnerabilities in Open Source C2 Frameworks

RCEOS command injection

Escalating From Reader To Contributor In Azure API Management

Privilege Escalation

Microsoft Windows MSI Installer - Repair to SYSTEM - A detailed journey

Privilege EscalationLocal Privilege Escalation

Hijacking SQL Server Credentials using Agent Jobs for Domain Privilege Escalation

Privilege Escalation

3CX Phone System Local Privilege Escalation Vulnerability

Privilege EscalationLocal Privilege Escalation

Built with ❤️ by Shubham Rawat