Closed CravateRouge closed 1 year ago
I'm not sure but I think that azurehound is not using PRTs but regular refresh tokens. PRT is only used to get access/refresh tokens.
You should try something like this. If Get-AADIntAccessToken
is provided -IncludeRefreshToken $true
, it will return an array where the last (index 1) token is refresh token:
$rt = (Get-AADIntAccessToken -ClientId "1950a258-227b-4e31-a9cf-717495945fc2" -Resource "https://graph.microsoft.com" -PRTToken (Get-AADIntUserPRTToken) -IncludeRefreshToken $true)[1]
.\azurehound.exe -r $rt list tenants --tenant "mytenant.com"
Thank you, it's working perfectly!!
When trying to use a PRT generated using AADInternals for azurehound I have the following error:
Which I don't have if I use MSAL.PS:
What's the difference between how the PRT are requested to have one signed and not the other?