---
id: 7976
title: "Illogical Apps – Exploring and Exploiting Azure Logic Apps"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/cloud-pentesting/illogical-apps-exploring-exploiting-azure-logic-apps/"
published_at: "2021-08-26T00:00:00Z"
tags: ["cloud", "cloud-security", "privilege-escalation", "red-team", "penetration-testing", "azure", "logic-apps"]
phying_url: "https://phying.com/item/7976"
lang: en
---

# Illogical Apps – Exploring and Exploiting Azure Logic Apps

## Summary

Azure pentesting research on Logic Apps: a Reader-role user can dump credentials embedded in Logic App definitions, while a Contributor can identify and abuse API Connection hijack scenarios.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2021-08-26T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/cloud-pentesting/illogical-apps-exploring-exploiting-azure-logic-apps/
- **Phying News:** https://phying.com/item/7976