daemon-sec-cheatsheet

The cheatsheet vault for operators: AD, enumeration, exploitation, priv-esc, web, DFIR
git clone https://git.daemon-sec.xyz/daemon-sec-cheatsheet.git
Log | Files | Refs | README | LICENSE

azure-services-application-endpoint.md (969B)

      1 ---
      2 title: "Azure Services - Application Endpoint"
      3 section: "Cloud"
      4 sectionSlug: "cloud"
      5 sourcePath: "docs/cloud/azure/azure-services-application-endpoint.md"
      6 sourceUrl: "https://github.com/swisskyrepo/InternalAllTheThings/blob/203bb0c0b290/docs/cloud/azure/azure-services-application-endpoint.md"
      7 sha: "203bb0c0b290"
      8 isIndex: false
      9 ---
     10 
     11 # Azure Services - Application Endpoint
     12 
     13 ## Enumerate
     14 
     15 * Enumerate possible endpoints for applications starting/ending with PREFIX
     16 
     17     ```powershell
     18     PS C:\Tools> Get-AzureADServicePrincipal -All $true -Filter "startswith(displayName,'PREFIX')" | % {$_.ReplyUrls}
     19     PS C:\Tools> Get-AzureADApplication -All $true -Filter "endswith(displayName,'PREFIX')" | Select-Object ReplyUrls,WwwHomePage,HomePage
     20     ```
     21 
     22 ## Access
     23 
     24 ```ps1
     25 https://myapps.microsoft.com/signin/<App ID>?tenantId=<TenantID>
     26 ```
     27 
     28 ## References
     29 
     30 * [Training - Attacking and Defending Azure Lab - Altered Security](https://www.alteredsecurity.com/azureadlab)