AD Connect Server Hack: Backdoor Password Vulnerability Explained #shorts

What could possibly go wrong in this setup if someone compromises that AD Connect server? Well, there are some like AD internals as an implementation for this and there's multiple ways to do it, but essentially you can patch the logon user W function and say something like, you know, if I don't care about the username, but if the password is banana, then say that the login is successful. And then you have a backdoor password you can can log into whatever account you want.