Done with this shit. @elonmusk went from a personal hero of mine to someone I at this point just pity. Don’t feel like being part of that anymore. Bye bye
Maybe Denmark should have stayed home in protest of the corrupt tournament in Qatar. Instead we kickstarted another era of DK sucking balls at soccer again.
Not the first time I have seen these walkthroughs relying on a managed identity with ridiculous role access. Can we get one with a less retarded attack path?
From initial access to Global Admin with #BloodHound and BARK.
In this thread let's walk, step by step, through an example attack path based on real configurations we've seen in real environments:
@MartinTastensen@angry_tarsier@JeffreyAppel7 Total control. Sometimes a dev subscription in the company tenant works fine. Other times it is insufficient. Regardless I would not want personal dev subscriptions in the company tenant
@deepthought161@JeffreyAppel7 Made for ease of use, not security or even best practices because that would be a headache for IT pros that have little Azure knowledge. Intentional low bar