i did compromise an "appscan" instance and i can query this api aHR0cHM6Ly9jbG91ZC5hcHBzY2FuLmNvbS9zd2FnZ2Vy (base64 link to documentation cause i can't post links) and you can get bunch of info (check the docs), but still i can't think of something to pivot to some internal server or cloud since its linked to entra id (azure) in some way . i could only think of some social engineering attacks but since its my first time facing this i am stuck.
if anybody has an idea on how to pivot from there or if you interested to help. btw its a known company
if anybody has an idea on how to pivot from there or if you interested to help. btw its a known company