New blog! Abusing Exchange: One API call away from Domain Admin. From any user with a mailbox to Domain Admin. Probably affects the majority of orgs using AD and Exchange.https://dirkjanm.io/abusing-exchange-one-api-call-away-from-domain-admin/ …
-
-
Yes I don't think this will work when they are on the same machine
-
That was indeed the problem. With Exchange on a different box as the domain controller, the PoC works just fine!pic.twitter.com/n1zMxCWuzZ
- 1 more reply
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.