Abusing OAuth Permission Grants for Tenant Persistence
OAuth Permission Grants Abuse in Microsoft Entra ID - Attack Path Analysis and MITRE ATT&CK Mapping.
OAuth Permission Grants Abuse in Microsoft Entra ID - Attack Path Analysis and MITRE ATT&CK Mapping.
A practical guide to FOCI-driven token reuse, demonstrating how token reuse can be abused under realistic conditions and how to mitigate it.
A practical guide to FOCI-driven token reuse, focusing on token types and storage locations across selected Microsoft applications.
A deep dive in Azure Key Vault bypass options ...