RED TEAMING WITH SERVICENOW

Summary from the TLDR InfoSec newsletter

MDSec, a British cybersecurity consultancy, provides an overview of ServiceNow functionality and ways to abuse it for red team functionality. This post discusses some access vectors, such as the API and login.do endpoint, and details how custom actions, discovery, orchestration, the LDAP listener, and relaying can be abused.