emiliensocchi.io

Passionate security researcher and professional. #EntraID #Azure #GCP #Kubernetes

Tiering Entra roles and application permissions based on known attack paths

15 minute read

An attempt to better understand the security implications of cloud administrative assets.

7 minute read

Investigating legacy permissions.

8 minute read

Bypassing assignment, eligibility and activation requirements.

4 minute read

Escalating to Global Admin via eligible assignments.

6 minute read

Escalating to Global Admin via active assignments.