WRITEUP #2758

Gaining Unlimited access to graph AuditLogs endpoint using complex filters with non-privileged user account

ReconInformation disclosurePrivilege escalation

by@SantasaloJoosua(Joosua Santasalo)

Program

Microsoft

Published

Apr 21, 2022

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://securecloud.blog/2022/04/21/microsoft-cloud-security-research-public-disclosure-gaining-unlimited-access-to-graph-auditlogs-endpoint-using-complex-filters-with-non-privileged-user-account/

▸ RELATED WRITEUPS

P3 (Medium) : How I Gain Access To NASA's Internal Workspace?!

ReconInformation disclosure

How I Got Bugs From Google Dorks

ReconInformation disclosure

How I can easily get four P1 at NASA using Simple Google Dorking.

ReconInformation disclosure

How 1 Exposed Honeywell API Gave us Control Over an Internal Engineering System

ReconMissing authentication

$1600 Bounty on a Main Domain

ReconSession fixation

Built with ❤️ by Shubham Rawat