Record · corpus.blog/posts/01a0876d-3f51-734b-b4e4-977e9f9c88f6

Obtaining Domain Admin from Azure AD by abusing Cloud Kerberos Trust

dirkjanm.io · published 13 June 2023

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at dirkjanm.io Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 24
Words captured: 4,013

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

Syncing yourself to Global Administrator in Azure Active Directory Read at the source ↗

blog.fox-it.com

Azure AD privilege escalation - Taking over default application permissions as Application Admin Read at the source ↗

dirkjanm.io

https://troopers.de/downloads/troopers19/TROOPERS19_AD_Im_in_your_cloud.pdf

troopers.de

https://dirkjanm.io/assets/raw/TR22_Mollema_Breaking_Azure_AD_joined_endpoints_in_zero-trust_environments_v1.0.pdf

dirkjanm.io

https://dirkjanm.io/assets/raw/Insomnihack%20Breaking%20and%20fixing%20Azure%20AD%20device%20identity%20security.pdf

dirkjanm.io

Active Directory forest trusts part 1 - How does SID filtering work? Read at the source ↗

dirkjanm.io

https://twitter.com/0xdeaddood

twitter.com

https://www.secureauth.com/blog/the-kerberos-key-list-attack-the-return-of-the-read-only-domain-controllers/

secureauth.com

https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-kile/732211ae-4891-40d3-b2b6-85ebd6f5ffff

learn.microsoft.com

Introducing ROADtools Token eXchange (roadtx) - Automating Azure AD authentication, Primary Refresh Token (ab)use and device registration Read at the source ↗

dirkjanm.io

https://github.com/dirkjanm/ROADtools/wiki/ROADtools-Token-eXchange-%28roadtx%29

github.com

https://github.com/dirkjanm/ROADtools_hybrid

github.com

https://github.com/fortra/impacket

github.com

https://github.com/ernw/python-wcfbin

github.com

https://github.com/ernw/python-wcfbin/issues/15

github.com

https://github.com/AndreasLrx

github.com

https://github.com/sfonteneau

github.com

Documentation Read at the source ↗

aadinternals.com

https://dirkjanm.io/assets/raw/Windows%20Hello%20from%20the%20other%20side_x33fcon.pdf

dirkjanm.io

https://github.com/dirkjanm/ROADtools

github.com

https://twitter.com/DrAzureAD

twitter.com

https://twitter.com/hotnops

twitter.com

https://twitter.com/elad_shamir

twitter.com

https://pretalx.com/fwd-cloudsec-2023/talk/8MRJT3/

pretalx.com