Curated security research, vulnerabilities, advisories and tools for practitioners.

Attacking Entra Metaverse: Part 1

Summary

This is part one in a two (maybe three…) part series regarding attacker tradecraft around the syncing mechanics between Active Directory and Entra. This first blog post is a short one, and demonstrates how complete control of an Entra user is equal to compromise of the on-premises user. For the entire blog series the point […]
Published
Collected