lateral-movement

Free copy of The Cyber Plumber's Handbook

mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse

Self-developed tools for Lateral Movement/Code Execution

A tool to make socks connections through HTTP agents

a unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfigurations and privilege escalations attacks, replicate the tactics and techniques of an advanced adversary in a network.

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

.NET 4.0 WinRM API Command Execution

C++ WinRM API via Reflective DLL

This tool can be used during internal penetration testing to dump Windows credentials from an already-compromised host. It allows one to dump SYSTEM, SECURITY and SAM hives and once copied to the attacker machines provides option to delete these files to clear the trace.

Manipulating and Abusing Windows Access Tokens.

.NET 4.0 Scheduled Job Lateral Movement

Suricata rules for network anomaly detection

conduct lateral movement attack by leveraging unfiltered services display name to smuggle binaries as chunks into the target machine

Invoke-KleptoKitty - Deploys Payloads and collects credentials

A set of instructions, command and techniques that help during an Active Directory Assessment.

A CALDERA plugin

A short script to automate the process of RDP session hijacking.

ssh.exe is available in windows 10 / server 2019 by default, let's LOLBAS it up!

This tool is used to find anomalies or suspicious login events, especially to detect lateral movement.

Perform directory listing, read and write file on remote computer via DCOM methods

Crowdsourced experiment on the use of lateral position for communication between an automated vehicle and a pedestrian.