corpus.blog
41554 blogs · 4,450,554 posts Claim your blog
Record · corpus.blog/posts/01a0871e-2e5f-725b-a4fc-7d9791870c48

Journey to Azure AD PRT: Getting access with pass-the-token and pass-the-cert

aadinternals.com · published 1 September 2020

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at aadinternals.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
18
Words captured
3,844

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://twitter.com/_dirkjan
twitter.com
https://twitter.com/tifkin%5F
twitter.com
https://twitter.com/rubin_mor
twitter.com
https://twitter.com/gentilkiwi
twitter.com
https://docs.microsoft.com/en-us/azure/active-directory/devices/concept-primary-refresh-token
docs.microsoft.com
Abusing Azure AD SSO with the Primary Refresh Token Read at the source ↗
dirkjanm.io
https://posts.specterops.io/requesting-azure-ad-request-tokens-on-azure-ad-joined-machines-for-browser-sso-2b0409caad30
posts.specterops.io
https://chrome.google.com/webstore/detail/windows-10-accounts/ppnbnpeolgkicgegkbkbjmhlideopiji?hl=en
chrome.google.com
https://github.com/gentilkiwi/mimikatz/releases/tag/2.2.0-20200807
github.com
https://medium.com/@mor2464/azure-ad-pass-the-certificate-d0c5de624597
medium.com
https://github.com/morRubin/AzureADJoinedMachinePTC
github.com
Digging further into the Primary Refresh Token Read at the source ↗
dirkjanm.io
https://csrc.nist.gov/publications/detail/sp/800-108/final
csrc.nist.gov
Documentation Read at the source ↗
aadinternals.com
https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-how-it-works-device-registration
docs.microsoft.com
https://docs.microsoft.com/en-us/azure/active-directory/develop/access-tokens
docs.microsoft.com
Bypassing conditional access by faking device compliance. Read at the source ↗
aadinternals.com
https://enterpriseregistration.windows.net/EnrollmentServer/device/?api-version=1.0"
enterpriseregistration.windows.net