Obtaining Global Admin in Every Entra ID Tenant(dirkjanm.io)

23 pointsby amaccuish10 เดือนที่ผ่านมา1 comments

Obtaining Global Admin in Every Entra ID Tenant

https://dirkjanm.io/obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/

1 comments

speckx10 เดือนที่ผ่านมา

> These tokens allowed full access to the Azure AD Graph API in any tenant. Requesting Actor tokens does not generate logs. Even if it did they would be generated in my tenant instead of in the victim tenant, which means there is no record of the existence of these tokens.

Wow! No logs.

I wonder how Microsoft would notify affected tenants.