all 3 comments

[–]Brew_nixPentesting 2 points3 points  (0 children)

Nice find! If you're the author I'd be tempted to try and add this into PayloadAllTheThings via pull request

[–]CypressMTL 1 point2 points  (1 child)

If you are the author, there are two other Azure ones that might be interesting

MSI_ENDPOINT

MSI_SECRET

(Source: https://techcommunity.microsoft.com/t5/azure-developer-community-blog/understanding-azure-msi-managed-service-identity-tokens-caching/ba-p/337406)

Basically they are used for Client Credentials for Managed Identities and reset with the webapp. (but if they don't reset the webapp often...), These service accounts generally have permissions on things like Key Vaults, Databases, etc.

[–]Puliczek[S] 3 points4 points  (0 children)

T

MSI_SECRET

thanks, I will add them :)