SharpSuccessor

SharpSuccessor SharpSuccessor هي أداة إثبات مفهوم POC مبنية على .NET لتسليح هجوم BadSuccessor الخاص بـ Yuval Gordon @YuG0rd من Akamai بالكامل. يمكن لمستخدم منخفض الامتيازات يمتلك صلاحيات CreateChild على أي وحدة تنظيمية OU في نطاق Active Directory مع صلاحية كتابة على كائن مستهدف تنفيذ استيلاء على...

badsuccessor

BadSuccessor.py Uno strumento di penetration testing che sfrutta la vulnerabilità di escalation dei privilegi dMSA delegated Managed Service Account negli ambienti Active Directory di Windows Server 2025. ⚠️ Disclaimer Legale Questo strumento è destinato esclusivamente a test di penetrazione...

BadSuccessor-PoC

🛡️ Advanced BadSuccessor CVE-2025-53779 – Weaponized PoC & D...

Metasploit Wrap-Up 01/16/2026

Persistence, dMSA Abuse & RCE Goodies This week, we have received a lot of contributions from the community, such as h00die, Chocapikk and countless others, which is greatly appreciated. This week’s modules and improvements in Metasploit Framework range from new modules, such as dMSA Abuse...

Critical Golden dMSA Attack in Windows Server 2025 Enables Cross-Domain Attacks and Persistent Access

Cybersecurity researchers have disclosed what they say is a "critical design flaw" in delegated Managed Service Accounts dMSAs introduced in Windows Server 2025. "The flaw can result in high-impact attacks, enabling cross-domain lateral movement and persistent access to all managed service accoun...

BadSuccessor Exploits Windows Server 2025 Flaw for Full AD Takeover

Akamai researchers reveal a critical flaw in Windows Server 2025 dMSA feature that allows attackers to compromise any…...

Critical Windows Server 2025 dMSA Vulnerability Enables Active Directory Compromise

A privilege escalation flaw has been demonstrated in Windows Server 2025 that makes it possible for attackers to compromise any user in Active Directory AD. "The attack exploits the delegated Managed Service Account dMSA feature that was introduced in Windows Server 2025, works with the default...