Author: zigmax

Hi! Attackers want to target service principals because: Service accounts and service principals do not have MFA Attackers can log into Azure using a service principal account These accounts exist…

Hi! Yesterday, I had the privilege to give a talk about an introduction of Azure Pentesting. Slides (in English) Video (in French) Maxime.

Hi! In this article, I will show you how you can exploit a virtual machine associated with a Managed Identity. To leverage this attack, we will use the LAVA –…

Hi! In this article, I will show you how you can leverage the MicroBurst tool to anonymously enumerating Azure Services. Please find below a list of DNS suffixes associated with…

Hi! Previous articles: AAD | Enabled or not? AAD | Enumerate valid emails/accounts In this article, I will show how you can run a Password Spray attack againt your Azure…