Lateral movement — topics Moving between hosts and identities. Credential reuse pass-the-hash · pass-the-ticket · overpass-the-hash Execution primitives smb-exec · wmi-exec · dcom-exec winrm-exec · evil-winrm · ssh-execution psexec-family Pivoting port-forwarding · ssh-tunneling chisel · ligolo-ng socks-proxies Session hijack rdp-session-hijack-tsmuxd ssh-agent-hijack AD lateral See active-directory-index.