token-theft

Ekoparty 2025·55 min

• EKOPARTY
• Red Team
• Date: 2025
• Location: Ekoparty

Nestori Syynimaa

Nestori Syynimaa details Deep-dive to Entra ID Token Theft Protection.

fwd:cloudsec·27 min

• FWD CLOUDSEC
• Cloud
• Date: 2025
• Location: Fwd Cloudsec

Shahar Dorfman · Sapir Federovsky

Shahar Dorfman explores Do Apps Have Imposter Syndrome? Unmasking Token Theft Campaigns.

TROOPERS IT Security Conference·46 min

• TROOPERS
• Threat Intel
• Date: 2025
• Location: Troopers

Engineers explore architecture and security mechanisms for Do Apps Have Imposter Syndrome? Unmasking Token Theft Campaigns.

RSAC Cybersecurity·51 min

• RSAC
• Community
• Date: 2023
• Location: Rsa

Token Theft Prevention (dPoP)

Analysts investigate attack surfaces and defenses concerning Token Theft Prevention (dPoP) - Nth Time is the Charm..

RSAC Cybersecurity·49 min

• RSAC
• Community
• Date: 2023
• Location: Rsa

Engineers explore architecture and security mechanisms for Token Theft: Hip Kids Are Doing It. Now What Are We Going to Do About It?.

BruCON Security Conference·44 min

• BRUCON
• Red Team
• Date: 2022
• Location: Brucon

Nestori Syynimaa

Nestori Syynimaa explores 09 - BruCON 0x11 - Deep-dive to Entra ID Token Theft Protection.

Main Stage·40 min

• DEF CON
• Cloud
• Date: Aug 2022
• Location: Las Vegas

Melvin Langvik

Melvin Langvik reverses Microsoft Office desktop cloud integration, demonstrating how attackers extract cached OAuth tokens, PRTs, and cloud credentials from memory.

Cloud Village·39 min

• DEF CON
• Cloud
• Date: Aug 2021
• Location: Las Vegas

Batuhan Sancak

Batuhan Sancak demonstrates advanced attack techniques targeting Azure Active Directory, including Primary Refresh Token (PRT) theft and OAuth abuse.