---
id: 7734
title: "Automating Azure App Services Token Decryption"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/cloud-pentesting/automating-azure-app-services-token-decryption/"
published_at: "2025-07-23T00:00:00Z"
tags: ["cloud", "cloud-security", "pentesting", "azure", "rbac", "app-services", "token-decryption", "easy-auth", "microburst"]
phying_url: "https://phying.com/item/7734"
lang: en
---

# Automating Azure App Services Token Decryption

## Summary

NetSPI automated Azure App Services Easy Auth token decryption: Contributor RBAC exposes encrypted token files and the decryption key, enabling token theft. The tooling now ships in MicroBurst.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2025-07-23T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/cloud-pentesting/automating-azure-app-services-token-decryption/
- **Phying News:** https://phying.com/item/7734