Welcome! You are invited to join a webinar: Azure Privilege Escalation via Azure API Permissions...
Microsoft's Azure is a complicated system of principals, securable objects, and the various systems controlling access to those securable objects. In this webinar, we will explain how Azure API...specterops.zoom.us
Automating application permission grant while avoiding AppRoleAssignment.ReadWrite.All
In a previous blogpost, I had detailed out the steps for automating permission grants (for both delegated and application permissions) from a headless process, i.e. in automation, using a managed…winsmarts.com
Azure AD privilege escalation - Taking over default application permissions as Application Admin
During both my DEF CON and Troopers talks I mentioned a vulnerability that existed in Azure AD where an Application Admin or a compromised On-Premise Sync Account could escalate privileges by...dirkjanm.io