BingBang: Hacking Bing.com (and much more) with Azure Active Directory

In cloud-managed environments, exposing one of your most sensitive assets to external attackers can be as simple as clicking a checkbox. This was the case for Bing.com with their Azure Active Directory (AAD) integration, where a single misconfiguration enabled us to bypass authentication, alter search results, and launch XSS attacks on its users stealing their Office 365 tokens. However, Bing was not an isolated case. By inventing a new scanning technique to remotely map AAD misconfigurations, we identified thousands of …

aad active directory assets attackers attacks authentication azure azure active directory bing bingbang bypass can case checkbox clicking cloud directory environments exposing external hacking integration launch managed misconfiguration results search sensitive simple single xss