SPA is for Single-Page Abuse! - Using Single-Page Application Tokens to Enumerate Azure
Tags
cmtmf-attack-pattern: Command-Line Interface
attack-pattern: Data Command-Line Interface - T1605 Conditional Access Policies - T1556.009 Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Multi-Factor Authentication - T1556.006 Powershell - T1059.001 Python - T1059.006 Server - T1583.004 Server - T1584.004 Sharepoint - T1213.002 Web Services - T1583.006 Web Services - T1584.006 Command-Line Interface - T1059 Connection Proxy - T1090 Powershell - T1086 Command-Line Interface
Show in Graph
Common Information
Type Value
UUID 3c09a5d3-c65f-4009-a410-9ca159c6be07
Fingerprint 3c7b8e19231b62dd
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 10, 2024, 4:20 p.m.
Added to db Dec. 10, 2024, 5:27 p.m.
Last updated Dec. 26, 2024, 11:04 a.m.
Headline SPA is for Single-Page Abuse! - Using Single-Page Application Tokens to Enumerate Azure
Title SPA is for Single-Page Abuse! - Using Single-Page Application Tokens to Enumerate Azure
Detected Hints/Tags/Attributes 53/2/19
Source URLs
Redirection Url
Details Source https://malware.news/t/spa-is-for-single-page-abuse-using-single-page-application-tokens-to-enumerate-azure/89214
URL Provider
Details Provider Source level domain
Details malware.news malware.news
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 158 ✔ Malware Analysis, News and Indicators - Latest topics https://malware.news/latest.rss 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 3 
bloomreach.com
Details Domain 242 
learn.microsoft.com
Details Domain 9 
www.office.com
Details Domain 34 
portal.azure.com
Details Domain 3 
www.microsoft365.com
Details Domain 6 
management.core.windows.net
Details Domain 40 
graph.microsoft.com
Details Domain 3 
graph.microsoft.net
Details Domain 70 
login.microsoftonline.com
Details Domain 308 
microsoft.net
Details Domain 422 
microsoft.com
Details Domain 11 
graph.windows.net
Details Domain 1 
specterdev.sharepoint.com
Details File 6 
management.core
Details IPv4 1583 
127.0.0.1
Details Url 3 
https://learn.microsoft.com/en-us/entra/identity-platform/index-spa
Details Url 3 
https://learn.microsoft.com/en-us/entra/identity-platform/scenario-spa-app-registration
Details Url 3 
https://learn.microsoft.com/en-us/azure/active-directory-b2c/configure-authentication-sample-spa-app
Details Url 3 
https://learn.microsoft.com/en-us/troubleshoot/entra/entra-id/governance/verify-first-party-apps-sign-in#application