---
id: 8090
title: "Azure Privilege Escalation via Cloud Shell"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/cloud-pentesting/attacking-azure-cloud-shell/"
published_at: "2019-12-10T00:00:00Z"
tags: ["cloud", "cloud-security", "privilege-escalation", "azure", "pentest", "storage", "cloud-shell"]
phying_url: "https://phying.com/item/8090"
lang: en
---

# Azure Privilege Escalation via Cloud Shell

## Summary

Shows that Azure subscription Contributors can read and modify other users' Cloud Shell files, downloading EXT2 home directory images to harvest secrets or injecting commands for cross-user execution.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2019-12-10T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/cloud-pentesting/attacking-azure-cloud-shell/
- **Phying News:** https://phying.com/item/8090