BloodHound
BloodHound copied to clipboard
Bug: Wrong edge information? (AZOwns)
Description:
I'm a beginner when it comes to Azure, so bear with me please.
I noticed in my BloodHound CE that a user had the AZOwns edge on a device. When clicking on the edge, I noticed a reference which is the following: https://www.netspi.com/blog/technical-blog/cloud-penetration-testing/attacking-azure-with-custom-script-extensions/.
I believe it's wrong because it should be related to the AZOwner edge instead as seen in the documentation: https://support.bloodhoundenterprise.io/hc/en-us/articles/17361533739163-AZOwner.
Are you intending to fix this bug?
No - I'm not sure I'm right on this. If yes, then I may create a PR if necessary.
Component(s) Affected:
- BloodHound CE
Steps to Reproduce:
- Go to BloodHound CE GUI.
- Click on the user that owns a device, and display its outbound rights (to see its
AZOwnsedge).
[email protected] - AZOwns -> [email protected]
- Click on the edge, and see the references noted.
Environment Information:
BloodHound: BloodHound CE v5.14.0
Collector: AzureHound 4.3.1
OS: Linux (Debian or Ubuntu)