tested

update azure apps
2025-12-12 15:49:51 -08:00 · 2024-12-22 01:28:12 +01:00 · 2024-12-21 17:49:41 +01:00
1 changed files with 5 additions and 6 deletions
--- a/linPEAS/builder/linpeas_parts/3_cloud/8_Azure_app_service.sh
+++ b/linPEAS/builder/linpeas_parts/3_cloud/8_Azure_app_service.sh
@@ -13,13 +13,12 @@
 # Small linpeas: 0


-API_VERSION="2021-12-13" #https://learn.microsoft.com/en-us/azure/virtual-machines/instance-metadata-service?tabs=linux#supported-api-versions
+API_VERSION="2019-08-01" #https://learn.microsoft.com/en-us/azure/app-service/overview-managed-identity?tabs=portal%2Chttp

 if [ "$is_az_app" = "Yes" ]; then
  print_2title "Azure App Service Enumeration"
-  echo "I haven't tested this one, if it doesn't work, please send a PR fixing and adding functionality :)"

-  HEADER="secret:$IDENTITY_HEADER"
+  HEADER="X-IDENTITY-HEADER:$IDENTITY_HEADER"

  az_req=""
  if [ "$(command -v curl || echo -n '')" ]; then
@@ -33,13 +32,13 @@ if [ "$is_az_app" = "Yes" ]; then
  if [ "$az_req" ]; then
    print_3title "Management token"
    exec_with_jq eval $az_req "$IDENTITY_ENDPOINT?api-version=$API_VERSION\&resource=https://management.azure.com/"
-
+    echo
    print_3title "Graph token"
    exec_with_jq eval $az_req "$IDENTITY_ENDPOINT?api-version=$API_VERSION\&resource=https://graph.microsoft.com/"
-    
+    echo
    print_3title "Vault token"
    exec_with_jq eval $az_req "$IDENTITY_ENDPOINT?api-version=$API_VERSION\&resource=https://vault.azure.net/"
-
+    echo
    print_3title "Storage token"
    exec_with_jq eval $az_req "$IDENTITY_ENDPOINT?api-version=$API_VERSION\&resource=https://storage.azure.com/"
  fi
Author	SHA1	Message	Date
Carlos Polop	aa5f5c0e2f	tested	2024-12-22 01:28:12 +01:00
Carlos Polop	d576055342	update azure apps	2024-12-21 17:49:41 +01:00