Casper Schjøtt

[Florian Hansemann @CyberWarship]

"Read2Own: Red Teaming Microsoft Azure"

#infosec #pentest #redteam
https://t.co/qSo3aYluGB

[Casper Schjøtt @cappercap1]

@vysecurity Seems like there's a global outage at MSFT impacting all their services.

[Casper Schjøtt @cappercap1]

@vysecurity @shad0wbits @k0s1337 We have to assume they dont know, which is why it's essential in the presales/scoping face that we make the customer aware of the difference, imo :-)

[Casper Schjøtt @cappercap1]

@vysecurity @shad0wbits @k0s1337 Then the problem is not the jobs done, but the name of the service and the agreed scope of the assignment. The above should then be called a Vulnerability Scanning, and the customer should be aware of the difference.

[Casper Schjøtt @cappercap1]

@binary_raider @SecurePeacock Man stop exposing my admin creds 🤥

[Florian Hansemann @CyberWarship]

"Read2Own: Red Teaming Microsoft Azure"

#infosec #pentest #redteam
https://t.co/qSo3aYluGB

[Casper Schjøtt @cappercap1]

@kmcquade3 @HackingLZ @jeffbencteux 😅

[Casper Schjøtt @cappercap1]

@BlueTeamCon @Microsoft @BlueTeamCon will this be recorded and available for on-demand viewing?

[Casper Schjøtt @cappercap1]

@biskopp3n @Haus3c

[Casper Schjøtt @cappercap1]

@martin_schmidli @DebugPrivilege Nope sadly. Exclusions cover all rules per default 😔

[Casper Schjøtt @cappercap1]

Any other known attacks and hacks involving Azure/M365 just like the targeted delegated administrative the NOBELIUM group performed? Could use some inspiration for a customer talk/workshop on current cloud threats and ttps #Cloudsecurity #cloudttps #cloudattacks

[Casper Schjøtt @cappercap1]

@4ndr3w6S @DebugPrivilege Safe to say its way easier when relying on Intune and no particular Excel macro usage :-)

[Casper Schjøtt @cappercap1]

Enjoying Blackhat and Vegas so far 😊 #blackhat2022 #Improsec

[Casper Schjøtt @cappercap1]

@DebugPrivilege I love them. Use them internally and always some of the first things I do when implementing workstation hardening at customers.

[Casper Schjøtt @cappercap1]

@_wald0 Neat little trick. Thanks 😊

[Improsec A/S @Improsec]

Do you have your head in the clouds when it comes to data security? Assuming your cloud service provider fully handles your data’s security is a common mistake. Evaluate your security posture with an Azure AD Security Analysis. https://t.co/xm6RRM9I4n

[Florian Hansemann @CyberWarship]

"Read2Own: Red Teaming Microsoft Azure"

#infosec #pentest #redteam
https://t.co/qSo3aYluGB

[Casper Schjøtt @cappercap1]

@DCSecuritydk 😔

[Casper Schjøtt @cappercap1]

A bit disappointed that the Microsoft global banned password list for Azure AD Password Protection doesn't include pwds such as "SummerSummerSummer22" and alike. Am I misinterpreting something here? #Microsoft #MicrosoftSecurity #aadpasswordprotection