Back to directory
WRITEUP #1354

I’d TAP That Pass

CloudAzure ADOAuth
by@hotnops(Daniel Heinsen)
Program
-
Published
Mar 29, 2023
Added to HackDex
Mar 31, 2023
Read Full Writeuphttps://posts.specterops.io/id-tap-that-pass-8f79fff839ac
▸ RELATED WRITEUPS
How I Got $250 For My Second Bug on HackerOne
OAuthSession expiration issue
The Hunt for ALBeast: A Technical Walkthrough
CloudAWS ALB
Addressed AWS defaults risks: OIDC, Terraform and Anonymous to AdministratorAccess
CloudOIDC
Double Agent: Exploiting Pass-through Authentication Credential Validation in Azure AD
CloudPrivilege escalation
Bucket Monopoly: Breaching AWS Accounts Through Shadow Resources
CloudRCE

Built with ❤️ by Shubham Rawat