Skip to content
corpus.blogBeta
Sign in Claim your blog
Record · netspi.com

Bypassing Microsoft Entra Conditional Access Policies via Nested App Authentication

netspi.com · 22 June 2026 · 15 min read

A post on netspi.com, published 22 June 2026, has not been cited by any blog yet (corpus.blog, measured 16 October 2026).

A record is what was published and who pointed at it. The text of the post is not shown here: read it at the source, or at its Wayback capture.

Read at netspi.com (opens in a new tab) Wayback capture (opens in a new tab)

0blogs citing

Citing blogs and links by period
Period Blogs Links
All time00
Last 90 days00
Last 30 days00
Last 7 days00
Figures for this page
Words blogs link it with0
External links23
Length3,306

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
http://oauth.com/ Who cites this page
oauth.com
https://openid.net/connect/ Who cites this page
openid.net
https://github.com/secureworks/family-of-client-ids-research Who cites this page
github.com
https://datatracker.ietf.org/doc/html/rfc6749?ref=aaronpina.com Who cites this page
datatracker.ietf.org
https://nodoc.nathanmcnulty.com/entra-iam
nodoc.nathanmcnulty.com
https://x.com/x_delfino Who cites this page
x.com
https://x.com/NathanMcNulty Who cites this page
x.com
https://www.youtube.com/watch?v=dTUeAhzmIu8 Who cites this page
youtube.com
https://github.com/dirkjanm/ROADtools Who cites this page
github.com
https://selenium-python.readthedocs.io/ Who cites this page
selenium-python.readthedocs.io
https://entrascopes.com/?appId=74658136-14ec-4630-ad9b-26e160ff0fc6
entrascopes.com
https://entrascopes.com/?appId=1fec8e78-bce4-4aaf-ab1b-5451cc387264 Who cites this page
entrascopes.com
https://entrascopes.com/?appId=00b41c95-dab0-4487-9791-b9d2c32c80f2
entrascopes.com
https://github.com/dirkjanm/ROADtools/blob/e6ed3c10373f2a15d920bcaa82f2236a4a461b38/roadtx/roadtools/roadtx/firstpartyscopes.json Who cites this page
github.com
https://entrascopes.com/?appId=f52f5287-0be2-4052-83e8-e69620aa67cc
entrascopes.com
https://entrascopes.com/?appId=5926fc8e-304e-4f59-8bed-58ca97cc39a4
entrascopes.com
https://cloudbrothers.info/conditional-access-bypasses/ Who cites this page
cloudbrothers.info
https://labs.jumpsec.com/tokensmith-bypassing-intune-compliant-device-conditional-access/
labs.jumpsec.com
https://github.com/secureworks/pytune Who cites this page
github.com
Bypassing conditional access by faking device compliance. Read at aadinternals.com (opens in a new tab)
aadinternals.com
Deep-dive to Azure AD device join Read at aadinternals.com (opens in a new tab)
aadinternals.com
NAA or BroCI…? Let Me Explain Read at specterops.io (opens in a new tab)
specterops.io
Going for Broke(ring) – Offensive Walkthrough for Nested App Authentication Read at specterops.io (opens in a new tab)
specterops.io

Similar posts

Avoid Entra Conditional Access using alternative token broker
cloudbrothers.info
7 Apr 2026
Conditional Access bypasses
cloudbrothers.info
30 Nov 2025
Bypassing Conditional Access policies that have a resource exclusion
dirkjanm.io
22 Jun 2026
Allow One, Allow All: When Conditional Access Loses the Plot
cirriustech.co.uk
14 Jan 2026
Insights into Entra ID’s (Un)Conditional Access
ERNW Insinuator
21 May 2026
#TROOPERS26 AD & Entra ID Security Track
ERNW Insinuator
11 Aug 2026
Conditional Access: Simple in Theory, Chaotic in Practice
ctrlaltroute.com
15 Mar 2026
Common Entra ID Security Assessment Findings – Part 4: Weak Conditional Access Policies
Compass Security
14 Apr 2026
Primary Refresh Token Exploitation - Attacking Entra Authenticated Services, Bypassing Passwords and MFA
pulsesecurity.co.nz
15 Dec 2025
How to Enable Baseline Scope Settings in Conditional Access
ourcloudnetwork.com
15 Jun 2026

Looking for more like this? Find posts and blogs like it
Something wrong here? Report a problem