ArkanSec June Download

We will talk about recent security headlines and more. Then our presentation for the evening will be...

In this adversary-minded presentation, Andrew explores modern phishing tradecraft by demonstrating how to proxy and bypass Conditional Access defenses in Microsoft Entra ID (Azure AD). The session dives into weaponizing Evilginx behind Apache for stealth and obfuscation, chaining it with token theft and abuse to escalate access without triggering MFA.

You’ll see real-world techniques showcased—including Browser-in-the-Browser attacks, token manipulation using ROADtools and TokenSmith, and post-exploitation with AADInternals, TeamFiltration, and GraphRunner. This session is ideal for red teamers, blue teamers, and security engineers who are interested in the latest in phishing and cloud abuse tactics.

Andrew is an avid learner who always enjoys discovering new things and writing code. Outside of work, he loves playing video games, traveling, and spending quality time with family and friends.

About ArkanSec

Everyone is welcome. There is no membership fee or registration. ArkanSec is Northwest Arkansas's hacker, InfoSec, & cybersecurity community. We look for creative ways to share information and experience with anyone interested in learning more about technology. Students, professionals, and hobbyists alike are encouraged to join us as we build a community dedicated to improving privacy, stability, and security. We strive to meet the first Thursday of every month. Find your preferred way to connect with us at https://www.arkansec.com.

We are always interested in hearing what you have to say. If you have any suggestions on topics or would like to share a project you're working on, email us at aW5mb3JtYXRpb24gfCBhcmthbnNlYyAhIGNvbQ==. Each month ArkanSec gets together to discuss recent security events & headlines, as well as to share technical experience with common tools.

Also check out other Meetups in Rogers.