SquarePhish 2.0 - Turning QR Codes into Entra ID Primary Refresh Tokens
Evolving SquarePhish to weaponize QR codes for Entra ID Primary Refresh Token extraction.
Summary
DEF CON Security Research Presentation
This talk covers technical security topics and vulnerability research. The presentation includes discussion of contemporary security challenges, demonstrations of exploitation techniques, and insights into defensive countermeasures and security best practices.
(AI summary — Claude Haiku)
Related talks
Cloud Village·39 min
Batuhan Sancak
Batuhan Sancak demonstrates advanced attack techniques targeting Azure Active Directory, including Primary Refresh Token (PRT) theft and OAuth abuse.
Hack In The Box Security Conference·1 hr 6 min
Carlos Gómez Quintana
Carlos Gómez Quintana explores #OOTB2025BKK - Cloud Edge Phishing: Breaking The Future Of Auth.
fwd:cloudsec North America·24 min
The Dark Economy of Stolen Cloud Accounts in Phishing Attacks- Alessandro Brucato & Stefano Chierici
Security researchers examine technical aspects of The Dark Economy of Stolen Cloud Accounts in Phishing Attacks- Alessandro Brucato & Stefano Chierici.