---
id: 7839
title: "Automating Managed Identity Token Extraction in Azure Container Registries"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/cloud-pentesting/automating-managed-identity-token-extraction-in-azure-container-registries/"
published_at: "2024-01-04T00:00:00Z"
tags: ["cloud", "cloud-security", "azure", "tooling", "microburst", "managed-identity", "acr", "token-extraction"]
phying_url: "https://phying.com/item/7839"
lang: en
---

# Automating Managed Identity Token Extraction in Azure Container Registries

## Summary

NetSPI shows how malicious Azure Container Registry tasks can generate and export tokens for attached Managed Identities, releasing a MicroBurst tool, Invoke-AzACRTokenGenerator, to automate it.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2024-01-04T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/cloud-pentesting/automating-managed-identity-token-extraction-in-azure-container-registries/
- **Phying News:** https://phying.com/item/7839