---
id: 7865
title: "What the Function: Decrypting Azure Function App Keys"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/cloud-pentesting/what-the-function-decrypting-azure-function-app-keys/"
published_at: "2023-08-12T00:00:00Z"
tags: ["cloud", "rce", "cloud-security", "azure", "research", "storage-account", "function-apps", "key-decryption"]
phying_url: "https://phying.com/item/7865"
lang: en
---

# What the Function: Decrypting Azure Function App Keys

## Summary

Compromise of an Azure Function App's backing Storage Account can expose encrypted access keys; researchers show how to decrypt function and master keys offline, enabling code theft and RCE.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2023-08-12T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/cloud-pentesting/what-the-function-decrypting-azure-function-app-keys/
- **Phying News:** https://phying.com/item/7865