All Labs#

Title

Description

Golden SAML

Simulate an adversary stealing the AD FS token signing certificate to sign a new SAML token, impersonate a privileged user and eventually access sensitive information via the Microsoft Graph API.