Taking the "B" Out of DBA - An Attack Path Against AD FS Through Database Admin... | SO-CON 2025
Source: YouTube · SpecterOps · published May 14, 2025 · 32:17
This presentation covers a technique to compromise federated identity and access management when MSSQL is used as the configuration database for Active Directory Federation Services (ADFS) 0:05-0:14.
Key Takeaways:
• The research focuses on ADFS environments where MSSQL serves as the configuration storage backend, presenting unique attack vectors 0:08-0:14
• The talk covers relevant ADFS configuration options that impact security posture and attack surface 0:40-0:45
• Well-known ADFS attacks are reviewed to establish context for the new technique 0:45-0:49
• The presentation examines MagicWeb, a notable tradecraft technique attributed to APT29, as foundational context 0:50-0:54
This research highlights the security risks inherent in ADFS deployments leveraging MSSQL, building upon established attack methodologies from sophisticated threat actors.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Identity & Access Management. Commonly maps to: Identity and Access Management (IAM), Security Architecture and Engineering. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
[Music] Hello everybody. Um, today I'm going to be talking about a technique to compromise federated identity and access management when MSSQL is used for ADFS configuration storage. Um, unfortunately, as you can probably hear, I'm a little bit under the weather. I nearly didn't turn up today, but thank the Lord for American over- the-counter medication. It's much much stronger than the UK stuff. I can I can tell you that. Cool. Um here's a little agenda for the the presentation. I'm going to talk a little bit about myself uh when this when this research happened and why this research came to be. I'm going to be covering some of the relevant configuration options for active directory federation services. I'm going to cover some of the very famous active directory federation services attack…