f

carlospolop · carlospolop · commit f91f5544109f · 2025-08-04T11:37:34.000+02:00
diff --git a/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/README.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/README.md
@@ -39,4 +39,3 @@ This section covers the pivoting techniques to move from a compromised Entra ID
 
 {{#include ../../../banners/hacktricks-training.md}}
 
-
diff --git a/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-arc-vulnerable-gpo-deploy-script.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-arc-vulnerable-gpo-deploy-script.md
@@ -69,4 +69,3 @@ At this point, we can gather the remaining information needed to connect to Azur
 - [https://xybytes.com/azure/Abusing-Azure-Arc/](https://xybytes.com/azure/Abusing-Azure-Arc/)
 
 {{#include ../../../banners/hacktricks-training.md}}
-
diff --git a/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-cloud-kerberos-trust.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-cloud-kerberos-trust.md
@@ -84,4 +84,3 @@ This dumps all AD user password hashes, giving the attacker the KRBTGT hash (let
 
 {{#include ../../../banners/hacktricks-training.md}}
 
-
diff --git a/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-cloud-sync.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-cloud-sync.md
@@ -162,4 +162,4 @@ az rest \
 
 
 
-{{#include ../../../banners/hacktricks-training.md}}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-connect-sync.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-connect-sync.md
@@ -215,4 +215,3 @@ az-seamless-sso.md
 
 {{#include ../../../banners/hacktricks-training.md}}
 
-
diff --git a/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-domain-services.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-domain-services.md
@@ -87,4 +87,4 @@ while IFS=$'\t' read -r vm_name resource_group; do
 done <<< "$vm_list"
 ```
 
-{{#include ../../../banners/hacktricks-training.md}}
+{{#include ../../../banners/hacktricks-training.md}}
diff --git a/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-federation.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-federation.md
@@ -160,4 +160,3 @@ Open-AADIntOffice365Portal -ImmutableID "aodilmsic30fugCUgHxsnK==" -Issuer http:
 
 {{#include ../../../banners/hacktricks-training.md}}
 
-
diff --git a/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-hybrid-identity-misc-attacks.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-hybrid-identity-misc-attacks.md
@@ -28,4 +28,3 @@ In order to synchronize a new user from Entra ID to the on-prem AD these are the
 
 {{#include ../../../banners/hacktricks-training.md}}
 
-
diff --git a/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-local-cloud-credentials.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-local-cloud-credentials.md
@@ -60,4 +60,3 @@ curl -o <filename_output> -L -H "Authorization: Bearer <token>" '<@microsoft.gra
 
 {{#include ../../../banners/hacktricks-training.md}}
 
-
diff --git a/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-pass-the-certificate.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-pass-the-certificate.md
@@ -38,4 +38,3 @@ Main.py [-h] --usercert USERCERT --certpass CERTPASS --remoteip REMOTEIP
 
 {{#include ../../../banners/hacktricks-training.md}}
 
-
diff --git a/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-pass-the-cookie.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-pass-the-cookie.md
@@ -35,4 +35,3 @@ Just navigate to login.microsoftonline.com and add the cookie **`ESTSAUTHPERSIST
 - [https://stealthbits.com/blog/bypassing-mfa-with-pass-the-cookie/](https://stealthbits.com/blog/bypassing-mfa-with-pass-the-cookie/)
 
 {{#include ../../../banners/hacktricks-training.md}}
-
diff --git a/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-primary-refresh-token-prt.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-primary-refresh-token-prt.md
@@ -364,4 +364,3 @@ curl -s -X POST \
 
 {{#include ../../../banners/hacktricks-training.md}}
 
-
diff --git a/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-pta-pass-through-authentication.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-pta-pass-through-authentication.md
@@ -104,4 +104,3 @@ az-seamless-sso.md
 
 {{#include ../../../banners/hacktricks-training.md}}
 
-
diff --git a/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-seamless-sso.md b/src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/az-seamless-sso.md
@@ -205,4 +205,3 @@ If the Active Directory administrators have access to Azure AD Connect, they can
 - [TR19: I'm in your cloud, reading everyone's emails - hacking Azure AD via Active Directory](https://www.youtube.com/watch?v=JEIR5oGCwdg)
 
 {{#include ../../../banners/hacktricks-training.md}}
-

Original file line number	Diff line number	Diff line change
`@@ -39,4 +39,3 @@ This section covers the pivoting techniques to move from a compromised Entra ID`
`39`	`39`
`40`	`40`	`{{#include ../../../banners/hacktricks-training.md}}`
`41`	`41`
`42`		`-`
Original file line number	Diff line number	Diff line change
`@@ -69,4 +69,3 @@ At this point, we can gather the remaining information needed to connect to Azur`
`69`	`69`	`- [https://xybytes.com/azure/Abusing-Azure-Arc/](https://xybytes.com/azure/Abusing-Azure-Arc/)`
`70`	`70`
`71`	`71`	`{{#include ../../../banners/hacktricks-training.md}}`
`72`		`-`
Original file line number	Diff line number	Diff line change
`@@ -84,4 +84,3 @@ This dumps all AD user password hashes, giving the attacker the KRBTGT hash (let`
`84`	`84`
`85`	`85`	`{{#include ../../../banners/hacktricks-training.md}}`
`86`	`86`
`87`		`-`
Original file line number	Diff line number	Diff line change
`@@ -162,4 +162,4 @@ az rest \`
`162`	`162`
`163`	`163`
`164`	`164`
`165`		`-{{#include ../../../banners/hacktricks-training.md}}`
	`165`	`+{{#include ../../../banners/hacktricks-training.md}}`
Original file line number	Diff line number	Diff line change
`@@ -215,4 +215,3 @@ az-seamless-sso.md`
`215`	`215`
`216`	`216`	`{{#include ../../../banners/hacktricks-training.md}}`
`217`	`217`
`218`		`-`
Original file line number	Diff line number	Diff line change
`@@ -160,4 +160,3 @@ Open-AADIntOffice365Portal -ImmutableID "aodilmsic30fugCUgHxsnK==" -Issuer http:`
`160`	`160`
`161`	`161`	`{{#include ../../../banners/hacktricks-training.md}}`
`162`	`162`
`163`		`-`
Original file line number	Diff line number	Diff line change
`@@ -28,4 +28,3 @@ In order to synchronize a new user from Entra ID to the on-prem AD these are the`
`28`	`28`
`29`	`29`	`{{#include ../../../banners/hacktricks-training.md}}`
`30`	`30`
`31`		`-`
Original file line number	Diff line number	Diff line change
`@@ -60,4 +60,3 @@ curl -o <filename_output> -L -H "Authorization: Bearer <token>" '<@microsoft.gra`
`60`	`60`
`61`	`61`	`{{#include ../../../banners/hacktricks-training.md}}`
`62`	`62`
`63`		`-`
Original file line number	Diff line number	Diff line change
`@@ -38,4 +38,3 @@ Main.py [-h] --usercert USERCERT --certpass CERTPASS --remoteip REMOTEIP`
`38`	`38`
`39`	`39`	`{{#include ../../../banners/hacktricks-training.md}}`
`40`	`40`
`41`		`-`