Author: zigmax
-
VM | Exploit Virtual Machine with Manage Identity (MSI)
Read more: VM | Exploit Virtual Machine with Manage Identity (MSI)Hi! In this article, I will show you how you can exploit a virtual machine associated with a Managed Identity. To leverage this attack, we will use the LAVA –…
-
Azure | Enumerating Azure Services
Read more: Azure | Enumerating Azure ServicesHi! In this article, I will show you how you can leverage the MicroBurst tool to anonymously enumerating Azure Services. Please find below a list of DNS suffixes associated with…
-
AAD | Password Spray Attack
Read more: AAD | Password Spray AttackHi! Previous articles: AAD | Enabled or not? AAD | Enumerate valid emails/accounts In this article, I will show how you can run a Password Spray attack againt your Azure…
-
AAD | Enumerate valid emails/accounts
Read more: AAD | Enumerate valid emails/accountsHi! Previous article: AAD | Enabled or not? In this article, I will show you how you can enumerate valid emails/accounts of an Azure Active Directory. By making the POST…
-
‘Copy alert JSON’ button added to security alert details pane
Read more: ‘Copy alert JSON’ button added to security alert details paneHi! Microsoft added a new capability to easily extract all the details of a specific alert with one button from the security alert’s details pane. Maxime.
-
Key Auto-Rotation in Azure Key Vault
Read more: Key Auto-Rotation in Azure Key VaultHi! In this article, I will share with you a new preview feature of Azure Key Vault. The goal of this feature is to automate the key rotation. Automated key…