Projects STRLCPY BlueMap Commits 1ce6bf09
🤬
  • Update Abuse Service Principle attack path as Reader - fix logs

  • Loading...
  • maor tal committed 2 years ago
    1ce6bf09
    1 parent ba1e3e2e
Revision indexing in progress... (symbol navigation in revisions will be accurate after indexed)
  • ■ ■ ■ ■ ■
    bluemap.py
    skipped 183 lines
    184 184   }
    185 185   },
    186 186   headers=headers)
    187  - print(addSecretPwd.json())
    188 187   if addSecretPwd.status_code == 200:
    189 188   pwdOwn = addSecretPwd.json()
    190 189   return "AppId: " + pwdOwn['keyId'] + "| Pwd: " + pwdOwn['secretText']
    skipped 367 lines
    558 557   EntAppsRecords.field_names = ["#", "App Name", "AppId", "Domain", "Has Ownership?"]
    559 558   EntAppsRecordsCount = 0
    560 559   for EntAppsRecord in RD_AddAppSecret()['value']:
    561  - print(CHK_AppRegOwner(EntAppsRecord['appId']))
    562 560   EntAppsRecords.add_row([EntAppsRecordsCount, EntAppsRecord['displayName'], EntAppsRecord['appId'], EntAppsRecord['publisherDomain'], CHK_AppRegOwner(EntAppsRecord['appId'])])
    563 561   EntAppsRecordsCount += 1
    564 562   print(EntAppsRecords)
    skipped 1 lines
    566 564   print("Trying to enumerate all Enterprise applications (service principals)..")
    567 565   EntAppsRecords = PrettyTable()
    568 566   EntAppsRecords.align = "l"
    569  - EntAppsRecords.field_names = ["#", "App Name", "AppId", "Domain", "RoleAssignments","Can Abused?"]
     567 + EntAppsRecords.field_names = ["#", "App Name", "AppId", "Domain", "Can Abused?"]
    570 568   EntAppsRecordsCount = 0
    571 569   for EntAppsRecord in RD_AddAppSecret()['value']:
    572 570   print("Trying to register service principle for " + EntAppsRecord['displayName'] + " app..")
    skipped 64 lines
Please wait...
Page is in error, reload to recover