Key Vault

MicroBurst

Invoke-EnumerateAzureSubDomains -Base "<base-name>" -Verbose

Az PowerShell

Conexión inicial.

$UserPassword = ConvertTo-SecureString '<password>' -AsPlainText -Force
$UserCredential = New-Object System.Management.Automation.PSCredential ("<user>@<tenant-name>.onmicrosoft.com", $UserPassword)
Connect-AzAccount -Credential $UserCredential

Enumeración general.

Get-AzResource
Get-AzKeyVault -VaultName "<vault-name>"
Get-AzKeyVaultSecret -VaultName "<vault-name>"
Get-AzKeyVaultSecret -VaultName "<vault-name>" -Name "<name>" -AsPlainText

Enumerar los permisos que el usuario actual tiene sobre el Key Vault.

$KeyVault = Get-AzKeyVault
$Token = (Get-AzAccessToken).Token
$SubscriptionID = (Get-AzSubscription).Id
$ResourceGroupName = $KeyVault.ResourceGroupName
$KeyVaultName = $KeyVault.VaultName
$URI = "https://management.azure.com/subscriptions/$SubscriptionID/resourceGroups/$ResourceGroupName/providers/Microsoft.KeyVault/vaults/$KeyVaultName/providers/Microsoft.Authorization/permissions?api-version=2015-07-01"
$RequestParams = @{
    Method  = 'GET'
    Uri     = $URI
    Headers = @{
        'Authorization' = "Bearer $Token"
    }
}
(Invoke-RestMethod @RequestParams).value