azure-ad-b2c

1 talk tagged with this topic.

Filters+

Loading filters…

1–1 of 1 talk · loading…

Sort

Main Stage·40 min

DEF CON
Cloud
Date: Aug 2023
Location: Las Vegas

Azure B2C 0-Day: An Exploit Chain from Public Keys to Microsoft Bug Bounty

John Novak

John Novak details an exploit chain in Microsoft Azure AD B2C, recovering signing keys to forge administrative tokens across customer tenants and the MSRC portal.

azure-ad-b2coauthcryptography+2