+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Hacking Tools and Programs (https://hackforums.net/forumdisplay.php?fid=10)
+---- Thread: pivoting from appscan api to on prem or cloud (/showthread.php?tid=6318647)
pivoting from appscan api to on prem or cloud - _xzibit - Jan 28, 2026
i did compromise an "appscan" instance and i can query this api aHR0cHM6Ly9jbG91ZC5hcHBzY2FuLmNvbS9zd2FnZ2Vy (base64 link to documentation cause i can't post links) and you can get bunch of info (check the docs), but still i can't think of something to pivot to some internal server or cloud since its linked to entra id (azure) in some way . i could only think of some social engineering attacks but since its my first time facing this i am stuck.
if anybody has an idea on how to pivot from there or if you interested to help. btw its a known company