TGViewer
CloudSec Wine CloudSec Wine @cloud_sec · 2.27K subscribers
Post #189 744
🔷 Illogical Apps - Exploring and Exploiting Azure Logic Apps

How to obtain sensitive information as an user with the Reader role, and how to identify/abuse API Connection hijack scenarios as a Contributor in Azure Logic Apps.

https://www.netspi.com/blog/technical/cloud-penetration-testing/illogical-apps-exploring-exploiting-azure-logic-apps/

#azure
NetSPI Illogical Apps – Exploring and Exploiting Azure Logic Apps A walk through enumerating and exploiting Azure Logic Apps with varying permissions.
More from @cloud_sec
  1. Oct 16, 2026👩‍💻 3 lessons from frontier AI vulnerability research FORGE Lab reports 140 Windows CVEs…
  2. Oct 14, 202620 октября в 12:00 (мск) пройдёт бесплатный вебинар «Мониторинг событий безопасности в MWS…
  3. Oct 14, 2026🔶 Introducing Strands Box: AI agent sandboxes powered by Dogwood Strands Box is an open s…
  4. Oct 13, 2026👩‍💻 Azure's Weakest Link - Five Full Cross-Tenant Compromises Five critical Azure cross-…
  5. Oct 12, 2026🤖 The AI SDLC transformation playbook Atlassian's shared their own version of an AI SDLC…
  6. Oct 9, 2026⚠️ Discovering and exploiting a remote code execution vulnerability in OpenCode Datadog Se…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →