We’re Inviting Guests to Admin Groups Now? Broad Dynamic Membership Rules & Guest Accounts
We have seen broad membership rules in multiple penetration tests and red team engagements; let's take a look at one case we encountered recently and how to (ab)use it should you come across it