writeups.xyz / From listKeys to Glory: How We Achieved a Subscription Privilege Escalation and RCE by Abusing Azure Storage Account Keys

Submitter : c2a

Date: 11 April 2023

Bounty : undisclosed

Vulnerabilities :

• Cloud
• Privilege Escalation

Programs :

• Microsoft (Azure)

Authors :

• Roi Nisimi (@Roinisimi)

Link :
https://orca.security/resources/blog/azure-shared-key-authorization-exploitation/