This was a fun one to dig into.
Ever wonder how Azure Easy Auth really works, and how to break it?
Turns out it's pretty easy, and it may be abusable for priv esc and lateral movement:
dazesecurity.io/blog/abusing...
dazesecurity.io
Continuous Testing
