Broken Azure 3 - Hacking Service Principals

Ready for a deep dive into #Azure security? Check our next training https://cutt.ly/bh-us In the previous #azuresecurity videos we hacked Azure storage account and got access to a pem file. In this video we will see what can we do with this file. You will learn: - What are Azure service principals - How can you login as Azure service principal - Default permissions Azure service principals have - How can you abuse these permissions 00:18 What's a pem file 01:20 What's Azure service principal 02:08 What are the methods to login as Azure service principal 04:00 Logging in to Azure as service principal with a private key 05:25 Listing Azure service principal permissions 06:40 Default permissions Azure service principals have 07:50 Getting the flag