Obtaining Global Admin in Every Entra ID Tenant(dirkjanm.io)

23 pointsby amaccuish10 mesi fa1 comments

Obtaining Global Admin in Every Entra ID Tenant

https://dirkjanm.io/obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/

1 comments

speckx10 mesi fa

> These tokens allowed full access to the Azure AD Graph API in any tenant. Requesting Actor tokens does not generate logs. Even if it did they would be generated in my tenant instead of in the victim tenant, which means there is no record of the existence of these tokens.

Wow! No logs.

I wonder how Microsoft would notify affected tenants.