DEF CON 30 - Melvin Langvik - Taking a Dump In The Cloud

Taking a Dump In The Cloud is a tale of countless sleepless nights spent reversing and understanding the integration between Microsoft Office resources and how desktop applications access them. The release of the TeamFiltration toolkit, a modern toolkit connecting all the data points to more effectively launch attacks against Microsoft Azure Tenants, understanding the benefits of non-interactive logins and how one can abuse the magic of Microsofts OAuth implementation with Single-Sign-On to automagically exfiltrate all the loot. Streamlining the process of account enumeration and validation. Thoughts on working effectively against Azure Smart Lockout. Exploring options of vertical movement given common AAD configurations, and more!