UPDATE — Two PoC exploits for the BadSuccessor flaw in Windows Server 2025 are now public.
⚠️ One enables stealthy privilege escalation with just a Kerberos ticket
⚠️ SharpSuccessor lets low-priv users gain domain admin via CreateChild rights
CheckDot is SAFU