Chisel
A practical Chisel guide: tunnel TCP and UDP over HTTP, build a reverse SOCKS pivot from a foothold, reach internal hosts, and keep the noise low in a lab.
Tagged “Lateral Movement”
4 entries tagged “Lateral Movement”. Browse all tags
All entries
BloodHound
A practical BloodHound guide: collect Active Directory graph data, ingest it, hunt attack paths to Domain Admin, and read the output without chasing dead ends.
Evil-WinRM
A practical Evil-WinRM guide: get an interactive WinRM shell on Windows with a password, hash, or certificate, move files, load scripts, and stay inside scope.
Linux Strength Training Walkthrough
find/grep filesystem enumeration plus John cracking of GPG-encrypted files and hashes harvests reused credentials for lateral movement across users, then unrestricted sudo grants root.