Discover and read the best of Twitter Threads about #BARK
Most recents (4)
Life is Fast!
We all feel like we never have enough time, so i bring you:
15 Mind-Blowing AI Tools to Revolutionize Your Life and Save You Time!
Let's get to it! 👇
We all feel like we never have enough time, so i bring you:
15 Mind-Blowing AI Tools to Revolutionize Your Life and Save You Time!
Let's get to it! 👇
1. Text Blaze
🔸 Revolutionizing Typing and Automation!
🔸 Say goodbye to repetitive typing and errors with Text Blaze!
#TextBlaze #AITool #Automation #Writing
🔸 Revolutionizing Typing and Automation!
🔸 Say goodbye to repetitive typing and errors with Text Blaze!
#TextBlaze #AITool #Automation #Writing
2. Loopin
🔸 Enhancing Meetings with AI Assistance!
🔸Revolutionize your meetings with Loopin’s AI meeting assistant!
#Loopin #AITool #AIAssistant #AI
🔸 Enhancing Meetings with AI Assistance!
🔸Revolutionize your meetings with Loopin’s AI meeting assistant!
#Loopin #AITool #AIAssistant #AI
This week I added 5 new functions to #BARK. A quick thread explaining each one with examples:
Get-ServicePrincipalOwner
List the current owner(s) of a specified #Azure AD Service Principal.
Example:
List the current owner(s) of a specified #Azure AD Service Principal.
Example:
New-ServicePrincipalOwner
Add a new owner to an AAD Service Principal. Owners can add credentials to SPs and then auth as them.
Example:
Add a new owner to an AAD Service Principal. Owners can add credentials to SPs and then auth as them.
Example:
Azure App Service Web Apps are yet another #Azure service that supports managed identity assignments.
Here's how attackers can use #BARK to abuse those assignments:
Here's how attackers can use #BARK to abuse those assignments:
There are at least 3 ways to achieve code execution on an Azure App Service Web App ("Azure Web App" from here on) instance:
1. The Kudu shell execution API endpoints
2. Poison deployment to include a web shell in the app
3. Find a cmd execution vulnerability in the deployed app
1. The Kudu shell execution API endpoints
2. Poison deployment to include a web shell in the app
3. Find a cmd execution vulnerability in the deployed app
We'll focus on #1 - abusing the built-in Kudu shell execution endpoints.
This is the feature the Azure GUI uses as its "Debug Console" and is documented here: github.com/projectkudu/ku…
@kfosaaen discussed this in his August 2020 blog post here: netspi.com/blog/technical…
This is the feature the Azure GUI uses as its "Debug Console" and is documented here: github.com/projectkudu/ku…
@kfosaaen discussed this in his August 2020 blog post here: netspi.com/blog/technical…
For 2020 I'm going to try the one photo a day challenge. I'll reply tip this each day with a photo.
Marble Kaleidoscope.
Sony a7iii
FE 2.8/90 Macro G OSS
ISO 400
f/5.0
1/30
Sony a7iii
FE 2.8/90 Macro G OSS
ISO 400
f/5.0
1/30
Carew Sconce
2/366
Samsung Note 10+
6 mm
ISO 20O
f/2.1
1/17
2/366
Samsung Note 10+
6 mm
ISO 20O
f/2.1
1/17
