# Lateral Movement

{{#include ../../banners/hacktricks-training.md}}

There are different different ways to execute commands in external systems, here you can find the explanations on how the main Windows lateral movements techniques work:

- [**PsExec**](psexec-and-winexec.md)
- [**SmbExec**](smbexec.md)
- [**WmiExec**](wmiexec.md)
- [**AtExec / SchtasksExec**](atexec.md)
- [**WinRM**](winrm.md)
- [**DCOM Exec**](dcom-exec.md)
- [**Pass the cookie**](https://cloud.hacktricks.xyz/pentesting-cloud/azure-security/az-lateral-movements/az-pass-the-cookie) (cloud)
- [**Pass the PRT**](https://cloud.hacktricks.xyz/pentesting-cloud/azure-security/az-lateral-movements/pass-the-prt) (cloud)
- [**Pass the AzureAD Certificate**](https://cloud.hacktricks.xyz/pentesting-cloud/azure-security/az-lateral-movements/az-pass-the-certificate) (cloud)

{{#include ../../banners/hacktricks-training.md}}