---
id: 8086
title: "Attacking Azure with Custom Script Extensions"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/cloud-pentesting/attacking-azure-with-custom-script-extensions/"
published_at: "2020-02-13T00:00:00Z"
tags: ["cloud", "cloud-security", "privilege-escalation", "azure", "pentest", "vm-extensions", "run-command"]
phying_url: "https://phying.com/item/8086"
lang: en
---

# Attacking Azure with Custom Script Extensions

## Summary

Shows how Azure's Custom Script Extension and Run Command let a Virtual Machine Contributor run code as LocalSystem on any VM, even with RDP or SSH closed, enabling footholds and escalation.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2020-02-13T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/cloud-pentesting/attacking-azure-with-custom-script-extensions/
- **Phying News:** https://phying.com/item/8086