From Azure AD (Entra ID) to Active Directory (via Azure) – An Unanticipated Attack Path 文章描述了通过 Azure Active Directory 中的 Global Administrator 角色滥用权限的风险。攻击者可通过密码喷射获取 Office 365 全局管理员账户，并利用该账户在 Azure 中获得管理权限。这可能导致攻击者控制 Azure 虚拟机和 Active Directory 域控制器，进而引发全面的安全威胁。... 2020-5-27 19:17:0 | 阅读: 27 | 收藏 | Active Directory Security - adsecurity.org attacker powershell membership rbac acme

What is Azure Active Directory? Jan... 2020-1-13 04:17:3 | 阅读: 39 | 收藏 | adsecurity.org cloud powershell microsoft spraying

Slides Posted for Black Hat USA 2019 Talk: Attacking & Defending the Microsoft Cloud Aug 07 20... 2019-8-8 03:15:59 | 阅读: 25 | 收藏 | adsecurity.org cloud microsoft pace sean security

AD Reading: Windows Server 2019 Active Directory Features Aug 01 20... 2019-8-2 03:17:52 | 阅读: 24 | 收藏 | adsecurity.org ese database windows ntds memory

There’s Something About Service Accounts Mar... 2019-3-21 23:17:21 | 阅读: 34 | 收藏 | adsecurity.org backup privileged membership spns security

Attack Methods for Gaining Domain Admin Rights in Active Directory – Active Directory Security There are many ways an attacker can gain Domain Admin rights in Active Directory. This post... 2019-03-16 01:35:58 | 阅读: 418 | 收藏 | adsecurity.org attacker dit ntds network passwords

Mitigating Exchange Permission Paths to Domain Admins in Active Directory He highlights the key components of the issue in the blog post introd... 2019-2-13 03:2:24 | 阅读: 26 | 收藏 | adsecurity.org exchange windows microsoft trimarc forest

From DNSAdmins to Domain Admin, When DNSAdmins is More than Just DNS Administration Oct 11 20... 2018-10-11 22:24:8 | 阅读: 16 | 收藏 | adsecurity.org dnsadmins shay microsoft dnscmd

Domain Controller Print Server + Unconstrained Kerberos Delegation = Pwned Active Directory Forest Oct... 2018-10-10 22:15:43 | 阅读: 24 | 收藏 | adsecurity.org delegation spooler attacker security

Black Hat & DEF CON Presentation Slides Posted Aug 12 20... 2018-8-13 04:27:11 | 阅读: 30 | 收藏 | adsecurity.org vaults slides security forest

Presentations – Active Directory Security Presentations Interested in securing your enterprise and Active Direct... 2018-03-17 10:32:59 | 阅读: 56 | 收藏 | adsecurity.org slides bsides derbycon youtube security