Skip to content

Conversation

@Mauriceter
Copy link

Hello,

This is a small PR that add --krbtoken and --tenant to the PRT function to be able to query PRT using desktop SSO.

No changes were made to roadlib as everything is already implemented.

An example of use case:
The onprem domain is compromised, you got a managed device's keys, desktop sso is enable and you want to impersonate a user in entra id without its creds and CAP enforce MFA from unamanaged device.

With this you can:

  1. craft a ticket with ticketer.py and convert it with krbsso.py
  2. request a PRT for the user using the krbtoken and the device's keys
  3. Access resource "from a managed device" with the PRT and bypass MFA
roadtx prt --cert-pfx device.pfx --pfx-pass password --krbtoken krbtokenblablabla -t tenant.com

(If there is a better way to do it in such situation I would gladly ear about it)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant