$#key-vault

Hacker Holidays — Day 9: Crypto Cabana

An Azure static website leaks an over-scoped account SAS token, which exposes a hidden storage container holding service-principal credentials — and from there, a Key Vault secret whose "rotated" value is still recoverable in its previous version.

• #hacker-holidays
• #azure
• #cloud
• #sas-token