dMSA forge for BadSuccessor LDAP Exploitation with add, verify, delete, and search workflows.
-
Updated
Jul 8, 2026 - Python
dMSA forge for BadSuccessor LDAP Exploitation with add, verify, delete, and search workflows.
NHICanvas - Discover and Govern Non-Human Identities
Deterministic verification of Microsoft identity protocol invariants: typed OAuth/OIDC/JWT oracles, bounded MS-PAC parser, and sealed dMSA/Kerberos observations from an isolated Windows Server 2025 lab
Detection lab for the BadSuccessor dMSA privilege-escalation family in Windows Server 2025 AD. Collaborative — my fork for upstream pull requests.
Offline audit of AD deleted objects and BadSuccessor dMSA successor links (LDIF/JSON, detection-only)
To associate your repository with the dmsa topic, visit your repo's landing page and select "manage topics."