Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[enhancement] Add PrivExchange #15

Open
edermi opened this issue Sep 9, 2022 · 0 comments
Open

[enhancement] Add PrivExchange #15

edermi opened this issue Sep 9, 2022 · 0 comments
Assignees
Labels
enhancement New feature or request new-method Adding a new method to coerce authentication

Comments

@edermi
Copy link

edermi commented Sep 9, 2022

It is only relevant for exchange servers: https://dirkjanm.io/abusing-exchange-one-api-call-away-from-domain-admin/
If you want to keep the core checks clean from application specific checks that may only work on a small subset of hosts, you may consider to add a switch for extended checks that contains stuff like this or so... I expect the future to bring a lot more of these

@p0dalirius p0dalirius self-assigned this Sep 14, 2022
@p0dalirius p0dalirius added enhancement New feature or request new-method Adding a new method to coerce authentication labels Sep 14, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request new-method Adding a new method to coerce authentication
Projects
None yet
Development

No branches or pull requests

2 participants