Friday afternoon (vibe)coding project that was on my to-do for a while: obtaining Entra ID tokens from an endpoint by asking the WAM. This alternative to using the PRT cookie follows the legitimate SSO flow used by apps like Teams to obtain tokens. Code: github.com/dirkjanm/ask...

askWAM requests Microsoft Entra access tokens silently through Windows Web Account Manager (WAM)

github.com/dirkjanm/ask...

#infosec #cybersecurity #redteam #pentest #cloud #azure #entra

Glad to see a full house for the women’s match! The Rock is looking good. Definitely need to go on my next trip! @wrexhamafcwomen.bsky.social #askwam

A Microsoft-signed app can pop the real login screen and steal your OAuth token anyway. https://intel.threadlinqs.com/threat/TL-2026-2628 #ThreatIntel #askWAM #OAuth #TokenTheft

askWAM: Ask the Web Account Manager (WAM) for Entra ID tokens

Ask the Web Account Manager (WAM) for Entra ID tokens https://github.com/dirkjanm/askWAM