Azure Applications and Attack Strategies GPEN Practice Questions (Page 7)

Questions 31–31

1. 31expert · hard

   You have compromised a low-privileged user account in an Azure environment. The user has the 'Website Contributor' role on an App Service. You discover the App Service has a system-assigned managed identity enabled. What is the most effective way to escalate privileges using this access?

   • AUse the App Service's managed identity to request a token for Azure Resource Manager, then assign the identity a higher-privileged role like Contributor at the subscription level.
   • BModify the App Service's application settings to include a malicious extension that runs code as the managed identity, then use that identity to access other resources it has permissions for.
   • CUse the 'Website Contributor' role to add yourself as a co-administrator on the App Service, then access the managed identity's client secret from the portal.
   • DRestart the App Service to trigger a new deployment, then intercept the managed identity's token during the startup process.
   Reveal Solution Discussion Select an answer first