Abusing Azure Ad Pass-Through Authentication Vulnerabilities At Defcamp 2022