Get-AADIntTenantDomains no Longer Works

[m0chan]

Looks like Microsoft patched or made some changes to the autodiscover service and its no longer possible to leak all the other domains configured in the tenant. Is there another method or workaround for this?

[coffeegist]

This was already mentioned in #114 and closed in #115

[m0chan]

I saw that but it does look like there has been further changes on Microsofts end, i/e https://aadinternals.com/osint/ now no longer works either and only returns a singular domain.

[f3rn0s]

MS has updated the underlying implementation, I assume this will brick this method of gathering domains.

https://techcommunity.microsoft.com/blog/exchange/important-update-to-the-get-federationinformation-cmdlet-in-exchange-online/4410095

[missing0x00]

The fix in #115 worked at the time, but is no longer working for me either. Maybe it was an accidental bypass, or the change hadn't been fully rolled out yet.

[f3rn0s]

The fix in #115 worked at the time, but is no longer working for me either. Maybe it was an accidental bypass, or the change hadn't been fully rolled out yet.

The remediation by MS is a rolling release to be finished sometime in August. To quote this website it will "begin in late June 2025.... and is expected to complete by late August".

[JPG0mez]

So the change seems like its been implemented, yet https://aadinternals.com/osint/ still works?