---
id: 8037
title: "Lateral Movement in Azure App Services"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/cloud-pentesting/lateral-movement-azure-app-services/"
published_at: "2020-08-17T00:00:00Z"
tags: ["cloud", "azure", "lateral-movement", "cloud-pentesting", "app-services", "managed-identity", "key-vault"]
phying_url: "https://phying.com/item/8037"
lang: en
---

# Lateral Movement in Azure App Services

## Summary

From command execution on an Azure App Services host, attackers can inspect the environment, reach storage and Azure SQL, and abuse Managed Identity tokens to access Key Vaults and escalate.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2020-08-17T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/cloud-pentesting/lateral-movement-azure-app-services/
- **Phying News:** https://phying.com/item/8037