🔑 Golden DMSA

#ad #windows #vulnerability #dmsa #kerberos #persistence

Critical vulnerability in Windows Server 2025 allows attackers with KDS root key access to generate passwords for all dMSA/gMSA accounts forest-wide. New research reveals design flaw in ManagedPasswordId structure - only 1,024 possible combinations makes brute-force trivial.

🔗 Research:
https://www.semperis.com/blog/golden-dmsa-what-is-dmsa-authentication-bypass/

🔗 Source:
https://github.com/Semperis/GoldenDMSA

"While we appreciate Microsoft’s response, we respectfully disagree with the severity assessment."

BadSuccessor: Abusing dMSA to Escalate Privileges in Active Directory

#dMSA #ActiveDirectory #WindowsServer2025
https://www.akamai.com/blog/security-research/abusing-dmsa-for-privilege-escalation-in-active-directory#mitigation

Active Directory Managed Service Accounts – sMSA, gMSA e dMSA

https://www.ictpower.it/sistemi-operativi/active-directory-managed-service-accounts-smsa-gmsa-e-dmsa.htm

#ActiveDirectory #Security #Cybersecurity #ManagedServiceAccounts #ITPro #gMSA #dMSA #ICTPower