Abusing Azure Container Registry Tasks
Security Boulevard
APRIL 20, 2022
This concept of chaining disparate, seemingly low-risk and unrelated configurations into devastating attack paths is elegantly summarized by John Lambert: ?—? This tells Azure that the task runner is authorized to authenticate to Azure services as that service principal, without needing to provide a credential. The Execution.
Let's personalize your content