InPosts By SpecterOps Team MembersbyAndy Robbins·Jan 15, 2025Intune Attack Paths — Part 1Intune is an attractive system for adversaries to target…A response icon1A response icon1
InPosts By SpecterOps Team MembersbyAndy Robbins·Nov 20, 2024Azure Key Vault Tradecraft with BARKThis post details the existing and new functions in BARK that support Azure Key Vault tradecraft research
InPosts By SpecterOps Team MembersbyAndy Robbins·Mar 6, 2024Browserless Entra Device Code FlowDid you know that it is possible to perform every step in Entra’s OAuth 2.0 Device Code flow — including the user authentication steps —…
InPosts By SpecterOps Team MembersbyAndy Robbins·Feb 16, 2024The Most Dangerous Entra Role You’ve (Probably) Never Heard OfEntra ID has a built-in role called “Partner Tier2 Support” that enables escalation to Global Admin, but this role is hidden from view in…
InPosts By SpecterOps Team MembersbyAndy Robbins·Feb 12, 2024Directory.ReadWrite.All Is Not As Powerful As You Might ThinkDirectory.ReadWrite.All is an MS Graph permission that is frequently cited as granting high amounts of privilege, even being equated to the…
InPosts By SpecterOps Team MembersbyAndy Robbins·Feb 2, 2024Microsoft Breach — What Happened? What Should Azure Admins Do?On January 25, 2024, Microsoft published a blog post that detailed their recent breach at the hands of “Midnight Blizzard”. In this blog…A response icon4A response icon4
InPosts By SpecterOps Team MembersbyAndy Robbins·Aug 8, 2023BloodHound Community Edition: A New EraI’m proud to announce the availability of BloodHound Community Edition (BloodHound CE)!
InPosts By SpecterOps Team MembersbyAndy Robbins·May 16, 2023From DA to EA with ESC5There’s a new, practical way to escalate from Domain Admin to Enterprise Admin.
InPosts By SpecterOps Team MembersbyAndy Robbins·Apr 18, 2023Introducing BloodHound 4.3 — Get Global Admin More OftenDiscover new attack paths traversing Microsoft Graph and seven new Azure Resource Manager objects.
InPosts By SpecterOps Team MembersbyAndy Robbins·Feb 15, 2023Abusing Azure App Service Managed Identity AssignmentsIntro
