Skip to content
attack.paths
Sign in
← LibraryTechnique entry
C-AZ-APP-CONSENTPrivilege Escalation

Entra App Consent Phishing

Trick a privileged user into consenting to an OAuth app with Directory.ReadWrite.All / RoleManagement.ReadWrite — app gets persistent tenant access.

§ Where this technique fits

C-AZ-APP-CONSENT is catalogued under the Privilege Escalation tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 4 on average.

§ Dossiers chaining this technique

§ What commonly comes next

  1. 01
    Azure RBAC Owner Assignment
    C-AZ-RBAC-OWNER · Privilege Escalation
    seen 1×