SpecterOps

specterops.io

09 September 2026 14:22

Tracking OAuth token exchanges is complicated. TATS can help. @1cemoon.bsky.social introduces the Token Analysis and Tracking System & shares some unexpected findings uncovered along the way. Check it out! https://ghst.ly/4xMBaYd

SpecterOps

specterops.io

01 June 2026 17:54

During an assessment, our team discovered that StrongDM auth state files containing JWTs & key material could be reused across hosts to obtain authenticated sessions & access infrastructure resources (CVE-2026-4387). Read more from @1cemoon.bsky.social: https://ghst.ly/4egbgVd

SpecterOps

specterops.io

28 March 2026 00:50

Don’t miss @1cemoon.bsky.social at #BSidesSD 🔥 Deep dive into NAA, brokered client IDs, and how token flows behave (and break) in Microsoft environments. Learn more: https://www.bsidessd.org/

SpecterOps

specterops.io

26 June 2025 19:11

How attackers move between AD domains via trusts depends on trust type & config. We're replacing TrustedBy edge in BloodHound with new trust edges for better attack path mapping. Check out @jonas-bk.bsky.social's blog post to learn more. ghst.ly/4lj9C5T

Fabian Bader

fabian.bader.cloud

26 June 2025 19:10

One of the results of the joined research with @dirkjanm.io is entrascopes.com Basically the yellow pages for Microsoft first party apps. #TROOPERS25