Cloud Security Azure AD / Entra ID Token Theft and Abuse
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
token-leakage
Cloud Security 
Cloud Security Azure Storage Accounts and SAS Token Abuse
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security Abusing Azure Managed Identities: From IMDS Token Theft to ARM Takeover
How attackers steal IMDS access tokens from Azure Managed Identities and pivot into the ARM API, plus blue-team detection.
Security Breaking OAuth 2.0 and OpenID Connect: Redirect, State, and Token Attacks
A practical guide to OAuth 2.0 and OIDC attacks - redirect_uri abuse, state/CSRF, PKCE, and token leakage - with blue-team defenses.