Cody Burkard
%20--%3E%3Cmetadata%20xmlns%3Ardf%3D%22http%3A%2F%2Fwww.w3.org%2F1999%2F02%2F22-rdf-syntax-ns%23%22%20xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FXMLSchema-instance%22%20xmlns%3Adc%3D%22http%3A%2F%2Fpurl.org%2Fdc%2Felements%2F1.1%2F%22%20xmlns%3Adcterms%3D%22http%3A%2F%2Fpurl.org%2Fdc%2Fterms%2F%22%3E%3Crdf%3ARDF%3E%3Crdf%3ADescription%3E%3Cdc%3Atitle%3EShadows%3C%2Fdc%3Atitle%3E%3Cdc%3Acreator%3EDiceBear%3C%2Fdc%3Acreator%3E%3Cdc%3Asource%20xsi%3Atype%3D%22dcterms%3AURI%22%3Ehttps%3A%2F%2Fwww.dicebear.com%3C%2Fdc%3Asource%3E%3Cdcterms%3Alicense%20xsi%3Atype%3D%22dcterms%3AURI%22%3Ehttps%3A%2F%2Fcreativecommons.org%2Fpublicdomain%2Fzero%2F1.0%2F%3C%2Fdcterms%3Alicense%3E%3Cdc%3Arights%3E%E2%80%9CShadows%E2%80%9D%20(https%3A%2F%2Fwww.dicebear.com)%20by%20%E2%80%9CDiceBear%E2%80%9D%2C%20licensed%20under%20%E2%80%9CCC0%201.0%E2%80%9D%20(https%3A%2F%2Fcreativecommons.org%2Fpublicdomain%2Fzero%2F1.0%2F)%3C%2Fdc%3Arights%3E%3C%2Frdf%3ADescription%3E%3C%2Frdf%3ARDF%3E%3C%2Fmetadata%3E%3Cdefs%3E%3Cg%20id%3D%22shoulders-square-2888f6e0%22%3E%3Cpath%20d%3D%22M4%2050V17C4%209%2010%203%2018%203h42c8%200%2014%206%2014%2014v33Z%22%20fill%3D%22%237b373f%22%2F%3E%3C%2Fg%3E%3Cg%20id%3D%22tops-hat-2888f6e0%22%3E%3Cg%3E%3Cellipse%20cx%3D%2228%22%20cy%3D%2221%22%20rx%3D%2228%22%20ry%3D%225%22%20fill%3D%22%237b373f%22%2F%3E%3Cpath%20d%3D%22M15%2021V8c0-5%2026-5%2026%200v13Z%22%20fill%3D%22%237b373f%22%2F%3E%3C%2Fg%3E%3C%2Fg%3E%3Cg%20id%3D%22heads-round-2888f6e0%22%3E%3Cuse%20transform%3D%22translate(3%203)%22%20href%3D%22%23tops-hat-2888f6e0%22%2F%3E%3Ccircle%20cx%3D%2231%22%20cy%3D%2238%22%20r%3D%2219%22%20fill%3D%22%237b373f%22%2F%3E%3C%2Fg%3E%3CclipPath%20id%3D%22clip-2888f6e0%22%3E%3Crect%20width%3D%22100%22%20height%3D%22100%22%20rx%3D%220%22%20ry%3D%220%22%2F%3E%3C%2FclipPath%3E%3C%2Fdefs%3E%3Cg%20clip-path%3D%22url(%23clip-2888f6e0)%22%3E%3Crect%20width%3D%22100%22%20height%3D%22100%22%20fill%3D%22%23ede4e0%22%2F%3E%3Cuse%20transform%3D%22translate(11%2051)%22%20href%3D%22%23shoulders-square-2888f6e0%22%2F%3E%3Cuse%20transform%3D%22translate(19%201)%22%20href%3D%22%23heads-round-2888f6e0%22%2F%3E%3C%2Fg%3E%3C%2Fsvg%3E)
This was a fun one to dig into. Ever wonder how Azure Easy Auth really works, and how to break it? Turns out it's pretty easy, and it may be abusable for priv esc and lateral movement: dazesecurity.io/blog/abusing...
Are you an Azure Pentester looking for new lateral movement techniques? Take a look at my blog post about abusing Data Factory to steal secrets and tokens. Thanks @karimscloud.bsky.social for the inspiration to look into this. codyburkard.com/abusingselfh...
Hello BlueSky World :) I am an Azure Security researcher living in Norway. I research attack techniques against Entra, Azure, and applications built in Azure. You can find my blog at codyburkard.com
You are up to date.