Loading video...
Video Failed to Load
Today we unveil BadSuccessor - a new no-fix Active Directory privilege escalation technique. We will explore the recently introduced dMSA feature, and show how it enables turning a very common, seemingly benign permission, into a full domain take over.
58,598 views • 1 year ago •via X (Twitter)
2 Comments

Milan Gabor1 year ago
@orangecyberdef something to include in GOAD config ;)

unnamed1 year ago
Congrats on finding this! Do you have any indication as to how many affected?


