writeups.xyz / Lateral movement and on-prem NT hash dumping with Microsoft Entra Temporary Access Passes

Submitter : c2a

Date: 6 May 2024

Bounty : undisclosed

Vulnerabilities :

• Lateral Movement
• Persistence
• Post-Exploitation

Programs :

• Microsoft (Entra ID / Azure AD)

Authors :

• Dirk-Jan Mollema (@_Dirkjan)

Link :
https://dirkjanm.io/lateral-movement-and-hash-dumping-with-temporary-access-passes-microsoft-entra/