Does Microsoft Teams Store Auth Tokens as Cleartext? [YouTube Release]

Youtube Releases
1

Additional Resources:

Bleeping Computer Article

My Tweet
https://twitter.com/TomLawrenceTech/status/1570366430536925184

Process Explorer

How to use Process Explorer to extract clear text

Connecting With Us

Lawrence Systems Shirts and Swag

►👕 https://teespring.com/stores/lawrence-technology-services

AFFILIATES & REFERRAL LINKS

Amazon Affiliate Store
:shopping_cart: Lawrence Systems's Amazon Page

Ubiquiti Affiliate
:shopping_cart: Ubiquiti Store

All Of Our Affiliates that help us out and can get you discounts!
:shopping_cart: https://www.lawrencesystems.com/partners-and-affiliates/

Gear we use on Kit
:shopping_cart: Kit

Try ITProTV free of charge and get 30% off!
:shopping_cart: https://go.itpro.tv/lts

Use OfferCode LTSERVICES to get 10% off your order at
:shopping_cart: Tech Supply Direct - Premium Refurbished Servers & Workstations at Unbeatable Prices

Digital Ocean Offer Code
:shopping_cart: DigitalOcean: AI-Powered Unified Inference Cloud Infrastructure

HostiFi UniFi Cloud Hosting Service
:shopping_cart: HostiFi - Fast and Reliable UniFi in the Cloud

Protect you privacy with a VPN from Private Internet Access
:shopping_cart: https://www.privateinternetaccess.com/pages/buy-vpn/LRNSYS

Patreon
:money_bag: https://www.patreon.com/lawrencesystems

:stopwatch: Timestamps :stopwatch:
00:00 :play_button: MS Teams Security Exploit
01:07 :play_button: Bleeping Computer Article
02:17 :play_button: What I got wrong
03:12 :play_button: Viewing Clear Text Passwords from Memory
04:25 :play_button: In Summary
#microsoft #teams #security

2

Not sure if this is closely related - but see my post from Aug 2021 about SSH pass phrases stored in Windows Registry as plain text persistently between OpenSSH sessions.