---
id: 7907
title: "How to Gather Azure App Configurations"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/cloud-pentesting/gathering-azure-app-configurations/"
published_at: "2022-12-08T00:00:00Z"
tags: ["cloud", "cloud-security", "secrets", "privilege-escalation", "red-team", "azure", "misconfiguration"]
phying_url: "https://phying.com/item/7907"
lang: en
---

# How to Gather Azure App Configurations

## Summary

How Contributor access lets attackers retrieve Azure App Configuration access keys and dump key-value pairs that often hide secrets; read-write keys even enable tampering attacks.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2022-12-08T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/cloud-pentesting/gathering-azure-app-configurations/
- **Phying News:** https://phying.com/item/7907