corpus.blog
43,771 blogs · 5,563,491 posts Claim your blog
Record · corpus.blog/posts/01a0ca6b-18f1-731a-b54d-b9f51198107a

Abusing Azure AD SSO with the Primary Refresh Token

dirkjanm.io · published 21 July 2020

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at dirkjanm.io Wayback capture
3blogs citing
First cited
1 Sept 2020
Most recent
7 Apr 2026
Rank this month
not ranked
External links
17
Words captured
4,693

Cited by

Blog
In the post
Date
cloudbrothers.info
Avoid Entra Conditional Access using alternative token broker Read at the source ↗
7 Apr 2026
pulsesecurity.co.nz
Primary Refresh Token Exploitation - Attacking Entra Authenticated Services, Bypassing Passwords and MFA Read at the source ↗
15 Dec 2025
aadinternals.com
Journey to Azure AD PRT: Getting access with pass-the-token and pass-the-cert Read at the source ↗
1 Sept 2020

Links from this post

Link
Host
https://github.com/dirkjanm/ROADtools
github.com
https://docs.microsoft.com/en-us/azure/active-directory/devices/overview
docs.microsoft.com
https://docs.microsoft.com/en-us/azure/active-directory/devices/hybrid-azuread-join-plan
docs.microsoft.com
https://docs.microsoft.com/en-us/azure/active-directory/devices/hybrid-azuread-join-manual
docs.microsoft.com
https://docs.microsoft.com/en-us/azure/active-directory/devices/concept-primary-refresh-token
docs.microsoft.com
https://posts.specterops.io/requesting-azure-ad-request-tokens-on-azure-ad-joined-machines-for-browser-sso-2b0409caad30
posts.specterops.io
https://chrome.google.com/webstore/detail/windows-10-accounts/ppnbnpeolgkicgegkbkbjmhlideopiji?hl=en
chrome.google.com
https://developer.chrome.com/extensions/nativeMessaging
developer.chrome.com
https://ioninja.com/plugins/pipe-monitor.html
ioninja.com
https://twitter.com/cnotin/status/1285734903389265922?s=20
twitter.com
https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-auth-code-flow
docs.microsoft.com
https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-configurable-token-lifetimes
docs.microsoft.com
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-session-lifetime
docs.microsoft.com
https://github.com/leechristensen/RequestAADRefreshToken/
github.com
https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-admin-roles-secure
docs.microsoft.com
https://docs.microsoft.com/en-us/powershell/module/azuread/revoke-azureaduserallrefreshtoken?view=azureadps-2.0
docs.microsoft.com
https://github.com/dirkjanm/ROADtoken
github.com
Elsewhere on dirkjanm.io (2)