hacktricks/src/windows-hardening/lateral-movement

Lateral Movement

{{#include ../../banners/hacktricks-training.md}}

There are different different ways to execute commands in external systems, here you can find the explanations on how the main Windows lateral movements techniques work:

• PsExec
• SmbExec
• WmiExec
• AtExec / SchtasksExec
• WinRM
• DCOM Exec
• RDPexec
• SCMexec
• Pass the cookie (cloud)
• Pass the PRT (cloud)
• Pass the AzureAD Certificate (cloud)

{{#include ../../banners/hacktricks-training.md}}