Threat Level: green Handler on Duty: Manuel Humberto Santander Pelaez

SANS ISC: SANS Daily Network Security Podcast (Stormcast) for Tuesday, September 4th 2018 SANS Daily Network Security Podcast (Stormcast) for Tuesday, September 4th 2018


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

Reversing Medium Mobile App;

previous
next
SANS Daily Network Security Podcast (Stormcast) for Tuesday, September 4th 2018
00:00

My Next Class

Intrusion Detection In-DepthBaltimoreApr 27th - May 2nd 2020
Defending Web Applications Security EssentialsAmsterdamMay 11th - May 16th 2020

… more classes

Spotify spotify logo

Discussion

Regarding the "Active Directory Leaks via Azure", I think this article is incorrect and misleading at least.
First problem described as "Authenticate to your webmail portal (i.e. https://webmail.domain.com/) and Change your browser URL to: https://azure.microsoft.com/" simply does not result in the acceess the author is describing there (tested), unless maybe if the user is logging in as an Azure Administrator (but maybe not event then, I could not test this). The O365 email url is outlook.office365.com (with some other options available), so webmail.domain.com is not a very good example, again denotes lack of basic knowledge in these MS products. But no doubt that if you are an Azure Administrator with correct permissions you can see all users and more... My assumptionn is that the author used an account that was also Azure Admin and did not realise this.

The following actions also assume that the "attacker" has already stolen Admin credentials/session - like this would be so easy to do!
Of course if you can hijack admin session or steal credentials the options are limitless, no need to read the article to know this.
Posted by Nor on Wed Sep 05 2018, 08:12

New Discussions closed for all Podcasts older than two(2) weeks
Please send your comments to our Contact Form

Top of page
Intrusion Detection In-DepthBaltimoreApr 27th - May 2nd 2020
Defending Web Applications Security EssentialsAmsterdamMay 11th - May 16th 2020
IPv6 EssentialsAmsterdamMay 17th - May 18th 2020
Intrusion Detection In-DepthLas VegasJun 8th - Jun 13th 2020
Defending Web Applications Security EssentialsCupertinoJun 22nd - Jun 27th 2020
Intrusion Detection In-DepthMunichJul 6th - Jul 11th 2020
Defending Web Applications Security EssentialsArlingtonAug 10th - Aug 15th 2020
Intrusion Detection In-DepthLondonSep 7th - Sep 12th 2020
Intrusion Detection In-DepthMunichSep 14th - Sep 19th 2020
Intrusion Detection In-DepthRestonSep 28th - Oct 3rd 2020