Azure AD Kerberos Tickets: Pivoting to the Cloud

If you’ve ever been doing an Internal Penetration test where you’ve reached Domain Admin status and you have a cloud presence, your entire Azure cloud can still be compromised. In this blog, I’ll take you through this scenario and show you the dangers of machine account SSO compromise. We will do so without extracting any...

The post Azure AD Kerberos Tickets: Pivoting to the Cloud appeared first on TrustedSec.

account active directory security review azure azure ad azure cloud blog cloud cloud assessment cloud baseline configuration review cloud penetration testing compromise compromised doing domain domain admin internal kerberos machine penetration penetration test penetration testing pivoting scenario security testing & analysis sso test tickets trustedsec