authors karl-fosaaen 
Security Boulevard
FEBRUARY 15, 2023
Prior Work Karl Fosaaen wrote a great blog post in August of 2020 about Azure App Service abuses, including abusing managed identity assignments. Joshua Magri authored Invoke-AppServicesCMD.ps1 in 2021, which executes commands on Web App hosts through the Kudu API.
Security Boulevard
APRIL 20, 2022
There’s some great prior work in this area, specifically when it comes to abusing managed identity configurations in AzureRM: From Karl Fosaaen : Attacking ACRs with Compromised Credentials. Azure Privilege Escalation Using Managed Identities. Abusing Azure Hybrid Workers for Privilege Escalation. The solution: managed identities!
Expert insights. Personalized for you.
52 
Let's personalize your content