---
id: 7891
title: "Escalating Privileges with Azure Function Apps"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/cloud-pentesting/azure-function-apps/"
published_at: "2023-03-23T00:00:00Z"
tags: ["cloud", "rce", "cloud-security", "privilege-escalation", "azure", "function-apps", "undocumented-api"]
phying_url: "https://phying.com/item/7891"
lang: en
---

# Escalating Privileges with Azure Function Apps

## Summary

Undocumented Azure Function App portal APIs let Reader-role users perform arbitrary file reads, exposing ASP.NET keys on Windows and master keys that enable code execution in Linux containers.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2023-03-23T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/cloud-pentesting/azure-function-apps/
- **Phying News:** https://phying.com/item/7891