Abusing Azure Active Directory: Who Would You Like To Be Today?

No ratings

Presented at DEEPSEC 2020 by

Dr. Syynimaa

Azure AD is used by Microsoft Office 365 and over 2900 third-party apps. Although Azure AD is commonly regarded as secure, there are serious vulnerabilities regarding identity federation, pass-through authentication, and seamless single-sign-on.In this session, using AADInternals PowerShell module, the exploitation of these vulnerabilities to create backdoors, impersonate users, and bypass MFA are demonstrated.The purpose of this session is to raise awareness of the importance of the principle of least privilege and the role of on-prem security to cloud security.