/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 damienbod.com
ASP.NET Core user delegated access token management | Software Engineering
| | az-liftshift.com
Auto sign-out using ASP.NET Core Razor Pages with Azure AD B2C - Azure Lift & Shift
3.1 parsecs away

Travel
| | This article shows how an ASP.NET Core Razor Page application could implement an automatic sign-out when a user does not use the application for n-minutes. The application is secured using Azure AD B2C. To remove the session, the client must sign-out both on the ASP.NET Core application and the Azure AD B2C identity provider or
| | blog.davidebbo.com
Calling the Azure ARM API using plain REST - David Ebbo
2.8 parsecs away

Travel
| |
| | www.binarysecurity.no
Azure CLI Token Leak
4.1 parsecs away

Travel
| | Azure CLI was vulnerable to a registry server confusion attack in it's Azure Container Registry (ACR) module. If an attacker controls the value of the registry name, they can leak the token of the principal, scoped to the ARM API at https://management.azure.com/, effectively giving access to all Azure resources that the principal has access to. This was fixed in version azure-cli-2.54.0 in November 2023, so most users and CI/CDs have long since been updated past this.
| | plerion.com
Cloud Permissions
26.2 parsecs away

Travel
| Who has access to what shapes how attackers move around an environment. Limit their options with Cloud Infrastructure Entitlement Management (CIEM).