Persisting in an Azure subscription

Persistence in an Azure subscription can be established in multiple different services across the subscription. This is inclusive of Azure AD account access at the subscription (or management group) level, all the way down to the resource level. Since access to the broader subscription will be controlled by your identity (User Account, Service Principal, Managed Identity), you will want to have options at multiple levels to maintain (or regain) your access to these identities.

For starters, we will be looking at how we can gather existing subscription tokens for authenticated users. This can be a very practical way of keeping access through normal administrative user sessions.

Stealing credentials from a system

Depending on what your scope is, you may find yourself in an internal network environment or on an Azure VM, looking to persist in the tenant. While we could easily make an argument to escalate your privileges to a domain administrator...