Abusing Azure Active Directory: From MFA Bypass to Listing Global Administrators

  Рет қаралды 4,403

Black Hat

Black Hat

Күн бұрын

The majority of Fortune 500 organizations are using Azure Active Directory (Azure AD) as Identity and Access Management (IAM) solution. The high adoption rate makes Azure AD a lucrative target for threat actors, including state-sponsored actors like APT29/Nobelium.
Azure AD is leveraging Microsoft's not-so-well-documented Evolved Security Service (eSTS). eSTS hides multiple security token services so that users see only Azure AD.....
By: Sravan Akkaram , Nestori Syynimaa (DrAzureAD)
Full Abstract and Presentation Materials:
www.blackhat.c...

Пікірлер
Backdooring and Hijacking Azure AD Accounts by Abusing External Identities
36:39
Backdooring and Hijacking Azure AD Accounts by Abusing External Identities
Black Hat
Рет қаралды 6 М.
Compromising LLMs: The Advent of AI Malware
36:29
Compromising LLMs: The Advent of AI Malware
Black Hat
Рет қаралды 7 М.
Will A Guitar Boat Hold My Weight?
00:20
Will A Guitar Boat Hold My Weight?
MrBeast
Рет қаралды 264 МЛН
Миллионер | 1 - серия
34:31
Миллионер | 1 - серия
Million Show
Рет қаралды 2,2 МЛН
Когда отец одевает ребёнка @JaySharon
00:16
Когда отец одевает ребёнка @JaySharon
История одного вокалиста
Рет қаралды 1,6 МЛН
Spongebob ate Michael Jackson 😱 #meme #spongebob #gmod
00:14
Spongebob ate Michael Jackson 😱 #meme #spongebob #gmod
Mr. LoLo
Рет қаралды 10 МЛН
BingBang: Hacking Bing.com (and much more) with Azure Active Directory
34:26
BingBang: Hacking Bing.com (and much more) with Azure Active Directory
Black Hat
Рет қаралды 4,3 М.
Alice in Kernel Land: Lessons Learned From the eBPF Rabbit Hole
37:59
Alice in Kernel Land: Lessons Learned From the eBPF Rabbit Hole
Black Hat
Рет қаралды 4,7 М.
Phishing 2.0 - Detecting Evilginx, EvilnoVNC, Muraena and Modlishka
46:05
Phishing 2.0 - Detecting Evilginx, EvilnoVNC, Muraena and Modlishka
Push Security
Рет қаралды 2,6 М.
I Watched You Roll the Die: Unparalleled RDP Monitoring Reveal Attackers' Tradecraft
39:24
I Watched You Roll the Die: Unparalleled RDP Monitoring Reveal Attackers' Tradecraft
Black Hat
Рет қаралды 1,5 М.
Learn Microsoft Azure Active Directory in Just 30 Mins (May 2023)
38:05
Learn Microsoft Azure Active Directory in Just 30 Mins (May 2023)
Andy Malone MVP
Рет қаралды 141 М.
#HITBCW2021 D1 - Attack Scenarios Abusing Azure Active Directory - Bill Ben Haim & Zur Ulianitzky
52:15
#HITBCW2021 D1 - Attack Scenarios Abusing Azure Active Directory - Bill Ben Haim & Zur Ulianitzky
Hack In The Box Security Conference
Рет қаралды 5 М.
Threat Hunting in Active Directory Environment
37:15
Threat Hunting in Active Directory Environment
Black Hat
Рет қаралды 6 М.
Cybersecurity Architecture: Who Are You? Identity and Access Management
31:15
Cybersecurity Architecture: Who Are You? Identity and Access Management
IBM Technology
Рет қаралды 140 М.
Certified Pre-Owned: Abusing Active Directory Certificate Services
34:53
Certified Pre-Owned: Abusing Active Directory Certificate Services
Black Hat
Рет қаралды 12 М.
What Does an LLM-Powered Threat Intelligence Program Look Like?
40:11
What Does an LLM-Powered Threat Intelligence Program Look Like?
Black Hat
Рет қаралды 4,4 М.
Will A Guitar Boat Hold My Weight?
00:20
Will A Guitar Boat Hold My Weight?
MrBeast
Рет қаралды 264 МЛН