pentester.land· May 6, 2024· by Dirk-jan Mollema (@_dirkjan)

Lateral movement and on-prem NT hash dumping with Microsoft Entra Temporary Access Passes

Open Original Article ↗
Target Program: Microsoft (Entra ID / Azure AD)
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#Lateral movement#Persistence#Post-exploitation