BalCCon2k18 - Tanoy NoTTY Bose and blueberry vignesh4303
Reviews balCCon2k18 - Tanoy NoTTY Bose and blueberry vignesh4303 and evaluates key implications for security practitioners.
Summary
Red-team talk on attacking Microsoft hybrid cloud environments combining on-prem Active Directory and Azure AD. Covers federated services, roles, groups, and administrative touchpoints between environments. Demonstrates PowerShell enumeration of Azure AD tenants, domains, users, and privileged roles, plus pivoting from compromised on-prem users to privileged Azure AD accounts. Final section covers post-compromise tasks via the O365 admin panel including VM access, backdoor accounts, and mailbox delegation.
Related talks
BalCCon - Balkan Computer Congress·51 min
Network Access Uncontrolled
Examines balCCon2k19 - Tanoy NoTTY Bose and evaluates key implications for security practitioners.
BalCCon - Balkan Computer Congress·51 min
Tanoy n0tty Bose
Details balCCon2k17 - Tanoy n0tty Bose - One tool to rule them all and evaluates key implications for security practitioners.
BalCCon - Balkan Computer Congress·37 min
Nemanja Nikodijevic
Evaluates balCCon2k18 - Nemanja Nikodijevic - Towards the perfect cryptocurrency wallet and evaluates key implications for security practitioners.