In my recent red team project, i faced an MFA product securing RDP, ADFS, and Exchange. It seemed secure until I found vulnerabilities, including one that exposed TOTP QR codes for any user.
#Cybersecurity #RedTeam #PenetrationTesting