Curated security research, vulnerabilities, advisories and tools for practitioners.

Requesting Azure AD Request Tokens on Azure-AD-joined Machines for Browser SSO

Summary

Explore how RequestAADRefreshToken reveals OAuth 2.0 refresh tokens for Azure-AD-authenticated Windows users, enabling SSO authentication in browsers.
Published
Collected