unauth container registry

src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-container-registry-unauth.md

@@ -0,0 +1,26 @@
+# Az - Container Registry Unauth
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+## Container Registry Unauth
+
+For more information about conteiner registry check:
+
+{{#ref}}
+../az-services/az-container-registry.md
+{{#endref}}
+
+### Anonymous Pull Access
+
+It's possible to **allow anonymous pull access to images** inside a registry. 
+
+```bash
+# Authorize anonymous pulls
+az acr update --name <registry-name> --anonymous-pull-enabled true
+```
+
+Then, **anyone knowing the registry name** can pull images from `<registry-name>.azurecr.io`.
+
+{{#include ../../../banners/hacktricks-training.md}}
+
+