Exploiting BadSuccessor: Escalate Privileges from OU Write to Domain Admin in Windows Server 2025

Windows Server 2025 brings a host of new features, including a new type of service account called the Delegated Managed Service Account (dMSA). Designed to improve security and management over traditional service accounts, this new feature ironically...