Abusing Entra OAuth for Fun and Access to Internal Microsoft Applications
Security researchers expose authorization flaws in Microsoft Entra OAuth implementations, gaining lateral access across internal enterprise services.
Summary
No summary yet — watch the video above, or open it on YouTube.
Related talks
Black Hat·26 min
Analysts investigate attack surfaces and defenses concerning Bypassing Local Windows Authentication To Defeat Full Disk Encryption.
encryptionwindowsauthentication+2
OWASP Foundation·1 hr
Jenko Hwong
Jenko Hwong analyzes Defending Against New Phishing Attacks that Abuse OAuth Authorization Flows.
phishingoauthauthorization
PROIDEA Events·42 min
Nathan Hall
Security researchers examine technical aspects of DevOpsDays Krakow 2022 - Nathan Hall - Authentication and Authorization with Istio....
authenticationauthorizationdevopsday+2