BloodHound icon indicating copy to clipboard operation
BloodHound copied to clipboard

Bug: Wrong edge information? (AZOwns)

Open KenjiEndo15 opened this issue 1 year ago • 0 comments

Description:

I'm a beginner when it comes to Azure, so bear with me please.

I noticed in my BloodHound CE that a user had the AZOwns edge on a device. When clicking on the edge, I noticed a reference which is the following: https://www.netspi.com/blog/technical-blog/cloud-penetration-testing/attacking-azure-with-custom-script-extensions/.

I believe it's wrong because it should be related to the AZOwner edge instead as seen in the documentation: https://support.bloodhoundenterprise.io/hc/en-us/articles/17361533739163-AZOwner.

Are you intending to fix this bug?

No - I'm not sure I'm right on this. If yes, then I may create a PR if necessary.

Component(s) Affected:

  • BloodHound CE

Steps to Reproduce:

  1. Go to BloodHound CE GUI.
  2. Click on the user that owns a device, and display its outbound rights (to see its AZOwns edge).
[email protected] - AZOwns -> [email protected]
  1. Click on the edge, and see the references noted.

image

Environment Information:

BloodHound: BloodHound CE v5.14.0

Collector: AzureHound 4.3.1

OS: Linux (Debian or Ubuntu)

KenjiEndo15 avatar Sep 03 '24 14:09 KenjiEndo15