SharpSuccessor

Only the binary file. To review the PoC, visit the following pages:

SharpSuccessor is a .NET Proof of Concept (POC) for fully weaponizing Yuval Gordon’s (@YuG0rd) BadSuccessor attack from Akamai. A low privilege user with CreateChild permissions over any Organizational Unit (OU) in the Active Directory domain with write access on a target object can perform account takeover.

Credits:

• https://github.com/TeneBrae93/SharpSuccessor
• https://github.com/logangoins/SharpSuccessor
• https://www.akamai.com/blog/security-research/abusing-dmsa-for-privilege-escalation-in-active-directory