Python Penetration Testing: Teams Work Makes the Dreams Work

How I use Python to gather juicy Microsoft Teams data

The Discovery

The Azure AD Client secret value created when generating an application secret, can only be seen during its creation. As a result, developers often make a copy of this secret for their own use or to share with their team. However, I have come across instances where these secrets are stored in plaintext on various systems. In some cases, multiple secrets have been found, while in others, developers …

bug bounty cybersecurity penetration penetration testing python python-programming teams testing work