admin/dafthack-GraphRunner
1
0
Fork 0
mirror of https://github.com/dafthack/GraphRunner synced 2026-06-08 13:44:02 +00:00
Code Issues Packages Projects Releases Wiki Activity

Updated Potential Attack Path Examples (markdown)

Beau Bullock
2023-10-13 18:34:23 -04:00
parent 93b193ec18
commit 29d87b38bc
1 changed files with 0 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Potential-Attack-Path-Examples.md
-2
@@ -11,8 +11,6 @@ GraphRunner has a lot of different modules that do specific tasks but combining
Guest users can be injected into groups too but your current user (Entra ID user in the target tenant) needs to be injected first.
![Untitled](https://graphrunnerdemos.s3.amazonaws.com/GraphRunner_Demo_1_Groups_Abuse.gif)
### Dynamic Group PrivEsc (Abusing membership rule)
1. Identify dynamic groups (Get-DynamicGroups) that have rules that can be abused such as a rule that adds a user to a group if their email contains “admin”.