Moving between hosts and identities.

Credential reuse

• pass-the-hash · pass-the-ticket · overpass-the-hash

Execution primitives

• smb-exec · wmi-exec · dcom-exec
• winrm-exec · ssh-execution
• psexec-family

Pivoting

• port-forwarding · ssh-tunneling
• chisel · ligolo-ng
• socks-proxies

AD lateral

• See active-directory-index.