UnOAuthorized: Privilege Escalation to Global Administrator and other unsavory things

No ratings

Presented at 44CON 2024 by

Eric Woodruff

This talk explores a newly discovered technique that resulted in bypassing security controls to perform privilege escalation to Global Administrator in Entra ID (Azure AD), as well as some other actions against privileged users. Part conversation about the research background, part exploration of the foundations that permitted this technique, this talk will walk through the entire path to privilege escalation step-by-step. We’ll also look at how organizations can determine if they were vulnerable to this discovery.