Microsoft Azure environments can be vulnerable to privilege escalation issues just like most other computing systems. There are certain scenarios where user accounts and even cloud resources themselves can gain additional privileges that they didn’t previously have. One interesting escalation issue arises when accounts have the ability to modify other accounts such as service principals. In this video I’ll show how you can locate these types of escalation issues and exploit them. Links: AzureHound: https://github.com/BloodHoundAD/AzureHound How to Build a Cloud Hacking Lab: https://www.youtube.com/watch?v=4s_3oNwqImo BloodHound Installation Instructions: https://bloodhound.readthedocs.io/en/latest/installation/linux.html Azure CloudPentestCheatsheets: https://github.com/dafthack/CloudPentestCheatsheets/blob/master/cheatsheets/Azure.md Breaching the Cloud Training: https://www.antisyphontraining.com/breaching-the-cloud-w-beau-bullock/