Windows Lateral Movement

RedTeaming_CheatSheet/windows-ad/Lateral-Movement.md at main · 0xJs/RedTeaming_CheatSheetGitHub

Use Psexec to Open MMC as a SYSTEM user

#Open Terminal as System
PS C:\Tools\> .\PsExec -s -i powershell

PSSession

$SecPassword = ConvertTo-SecureString 's3rvice' -AsPlainText -Force;
$Cred = New-Object System.Management.Automation.PSCredential('Username', $SecPassword);

Runas

C:\\Windows\\system32> runas /netonly /user:INLANEFREIGHT\\adunn powershell
C:\\Windows\\system32> runas /user:Administrador "notepad.exe" cmd

RDP

transport_connect_tls:freerdp_set_last_error_ex ERRCONNECT_TLS_CONNECT_FAILED [0x00020008] use /tls-seclevel:0 to solve it

xfreerdp /v:10.10.120.69 /u:ldapreader /p:ppYaVcB5R /d:retro2.vl /tls-seclevel:0