Abusing Overly Permissive Roles in Azure File Sync
|
Azure File Sync is an Azure service that helps centralize your organization’s file shares in Azure Files. It allows you to synchronize file data from...
Recent posts
When Azure Dynamic Groups Meet Weak ACLs
|
Dynamic groups in Entra ID allow administrators to automatically manage group memberships by using user attributes. For instance, if an organization has different departments, it...
Privilege Escalation in Azure Machine Learning
|
A few months ago, when browsing through the Azure services list, I stumbled upon Azure Machine Learning. The sheer number of capabilities and complexity of...
Azure Application Proxy Hijacking
|
Azure Application Proxy offers a groundbreaking solution for remote users who need access to on-premises web applications. It is integrated with Microsoft Entra ID for...
Exploiting Azure Arc Management Tool to Capture NetNTLM Hashes
|
NT LAN Manager (NTLM) in a Windows network is a set of Microsoft security protocols that helps to authenticate the identity of users, secure data,...