Loading video...

Video Failed to Load

Go Home

Today we unveil BadSuccessor - a new no-fix Active Directory privilege escalation technique. We will explore the recently introduced dMSA feature, and show how it enables turning a very common, seemingly benign permission, into a full domain take over.

58,598 views • 1 year ago •via X (Twitter)

2 Comments

Milan Gabor's profile picture
Milan Gabor1 year ago

@orangecyberdef something to include in GOAD config ;)

unnamed's profile picture
unnamed1 year ago

Congrats on finding this! Do you have any indication as to how many affected?

Related Videos