Skip to content

ruschestor/ADFS_Windowstransport_Discover

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 
 
 

Repository files navigation

ADFS_Windowstransport_Discover

Searching for vulnerable ADFS endpoints that are exposed to the Internet

About vulnerability

https://github.com/MicrosoftDocs/windowsserverdocs/blob/master/WindowsServerDocs/identity/ad-fs/deployment/Best-Practices-Securing-AD-FS.md
https://docs.microsoft.com/ru-ru/windows-server/identity/ad-fs/deployment/best-practices-securing-ad-fs
https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-ad-fs-extranet-smart-lockout-protection
https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-ad-fs-extranet-soft-lockout-protection

URLs

https://domain.com/adfs/services/trust/13/windowstransport
https://domain.com/ls/idpinitiatedsignon.aspx

How to disable endpoints:

PS:>Set-AdfsEndpoint -TargetAddressPath /adfs/services/trust/2005/windowstransport -Proxy $false
PS:>Set-AdfsEndpoint -TargetAddressPath /adfs/services/trust/13/windowstransport -Proxy $false

How to use

Just populate array g_originaldomains with list of domains.

g_originaldomains = ["google.com"]

About

Searching for vulnerable ADFS endpoints that are exposed to the Internet

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors

Languages