badsuccessor

BadSuccessor.py A penetration testing tool that exploits the dMSA delegated Managed Service Account privilege escalation vulnerability in Windows Server 2025 Active Directory environments. Legal Disclaimer This tool is for authorized penetration testing and security research only. Using it agains...

SharpSuccessor

SharpSuccessor SharpSuccessor is a .NET Proof of Concept POC for fully weaponizing Yuval Gordon’s @YuG0rd BadSuccessor attack from Akamai. A low privilege user with CreateChild permissions over any Organizational Unit OU in the Active Directory domain with write access on a target object can...

Active-Directory-BadSuccessor

Active-Directory-BadSuccessor Overview In this room, we explore the BadSuccessor privilege escalation technique, a vulnerability that abuses delegated Managed Service Accounts dMSAs in Active Directory. The attack allows a user with sufficient control over a dMSA object to impersonate another...

BadSuccessor-PoC

🛡️ Advanced BadSuccessor CVE-2025-53779 – Weaponized PoC & D...

BadSuccessor Is Dead, Long Live BadSuccessor(?)

Read about Microsoft’s patch for BadSuccessor — a vulnerability in Windows Server Active Directory — and learn why its underlying mechanics still matter...

Critical Windows Server 2025 dMSA Vulnerability Enables Active Directory Compromise

A privilege escalation flaw has been demonstrated in Windows Server 2025 that makes it possible for attackers to compromise any user in Active Directory AD. "The attack exploits the delegated Managed Service Account dMSA feature that was introduced in Windows Server 2025, works with the default...