Submissions from dirkjanm.io

		One Token to rule them all – Obtaining Global Admin in every Entra ID tenant (dirkjanm.io)
		331 points by colinprince 5 months ago \| past \| 51 comments
		Obtaining Global Admin in Every Entra ID Tenant (dirkjanm.io)
		23 points by amaccuish 5 months ago \| past \| 1 comment
		The worst of both worlds: Combining NTLM Relaying and Kerberos delegation (dirkjanm.io)
		2 points by mooreds on Oct 26, 2021 \| past
		A different way of abusing Zerologon (CVE-2020-1472) (dirkjanm.io)
		1 point by WalterSobchak on Sept 25, 2020 \| past
		Exploiting CVE-2019-1040 – Combining Relay Vulns for RCE and Domain Admin (dirkjanm.io)
		3 points by vuln on June 14, 2019 \| past
		The Worst of Both Worlds: Combining NTLM Relaying and Kerberos Delegation (dirkjanm.io)
		1 point by based2 on March 9, 2019 \| past
		Abusing Exchange: One API call away from Domain Admin (dirkjanm.io)
		67 points by jve on Jan 28, 2019 \| past \| 5 comments
		Abusing Exchange: One API Call Away from Domain Admin (dirkjanm.io)
		13 points by el_duderino on Jan 22, 2019 \| past