Attacking ADFS Endpoints with PowerShell
Explore attacking ADFS endpoints using PowerShell in this comprehensive conference talk from Derbycon 2016. Dive into topics like identity providers, federation, and federated services. Learn about authentication bypass bugs, federation info retrieval, and login prompt manipulation. Examine Office 365 integration, managed federation, and automation techniques. Discover methods for handling multiple domains and claiming domains. Set up a test environment and explore PowerShell modules for AD and user enumeration. Witness live demonstrations and discuss future attack vectors, including dictionary attacks against federated accounts. Investigate pivoting to internal networks, exploiting single-factor VPNs, and leveraging malicious OneDrive documents, SharePoint, and Outlook rules. Conclude with attack mitigation strategies and a Q&A session.