Skip to content
attack.paths
Connexion
← LibraryTechnique entry
AD-BADSUCCESSORPrivilege Escalation

BadSuccessor (DMSA, 2025)

Create or hijack a Delegated Managed Service Account that lists a high-priv account in msDS-ManagedAccountPrecededByLink — inherits its powers.

§ Where this technique fits

AD-BADSUCCESSOR is catalogued under the Privilege Escalation tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 2 on average.

§ Dossiers chaining this technique

§ What commonly comes next

  1. 01
    Delegated Managed Service Account Auth
    AD-DMSA · Lateral Movement
    seen 1×