gitea-mirror/hacktricks-cloud
1
0
Fork 0
mirror of https://github.com/HackTricks-wiki/hacktricks-cloud.git synced 2025-12-23 15:37:53 -08:00
Code Issues Packages Projects Releases Wiki Activity

Update az-sql-post-exploitation.md

Browse Source
This commit is contained in:
Jaime Polop
2024-12-24 20:07:16 +01:00
committed by GitHub
parent 8dccf637c3
commit ef73ef3848
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
pentesting-cloud/azure-security/az-post-exploitation/az-sql-post-exploitation.md
View File

@@ -108,7 +108,7 @@ az sql db export \
### "Microsoft.Sql/servers/databases/import/action"
With this permission, you can import a database into an Azure SQL Server. An attacker or authorized user with this permission can potentially upload malicious or manipulated databases, overwriting existing ones or introducing harmful data. This can lead to privilege escalation by gaining control over sensitive data or by embedding harmful scripts or triggers within the imported database. Note: The server must allow Azure services and resources to access the server.
With this permission, you can import a database into an Azure SQL Server. An attacker or authorized user with this permission can potentially upload malicious or manipulated databases. This can lead to gaining control over sensitive data or by embedding harmful scripts or triggers within the imported database. Additionaly you can import it to your own server in azure. Note: The server must allow Azure services and resources to access the server.
{% code overflow="wrap" %}
```bash