The UnRightful Heir - My dMSA Is Your New Domain Admin
Yuval Gordon
DEF CON 33 · Day 1 · Main Stage
Yuval Gordon, a security researcher at Akamai Technologies, presented a critical vulnerability in Windows Server's newest identity feature: Delegated Managed Service Accounts (dMSA). Introduced by Mic
AI review
Yuval Gordon demonstrates 'Bad Successor' — a low-privilege Active Directory attack leveraging a design flaw in the new dMSA feature to achieve full domain compromise and mass credential harvesting without a single Domain Admin right.