nOAuth attack on AzureAD
July 20, 2023 ยท View on GitHub
Changing the email address of a user to one not belonging to the tenant is trivial in Microsoft Azure. The image below shows a spoofed email configured for the user account.
July 20, 2023 ยท View on GitHub
Changing the email address of a user to one not belonging to the tenant is trivial in Microsoft Azure. The image below shows a spoofed email configured for the user account.