Virtual machines

Taking over Azure VMs: run command and Custom Script Extension for SYSTEM or root execution, managed-identity token theft, and user-data and cloud-init secrets.

1 મિનિટનું વાંચન7 ઑક્ટો, 2026 ના રોજ અપડેટflorianamette1 યોગદાનકર્તા
તમારા આસિસ્ટન્ટને પૂછો (MCP)GitHub પર એડિટ કરો

A VM you hold write rights over is both a code-execution target and a credential source. The management plane gives you execution without any stored credential (run command, an extension), and once you are on the box, the VM's attached managed identity hands out a subscription token from the metadata endpoint.

Pages#

  • Run command: runCommand for SYSTEM or root execution with no credential.
  • Custom Script Extension: extensions/write to run code, including VMAccess to reset the admin password.
  • Managed identity: steal the VM identity's token from IMDS.
  • User data: read cloud-init and user data for secrets, or write it to run at boot.

References#

પાછલુંComputeઆગળનું Run command