Lateral Movement Admin -> System

PSexec Alternativen

schtasks /create /tn RunAsSystem /tr "cmd.exe /c your_command" /sc once /st 00:00 /ru SYSTEM /f

• Impacket -> psexec.py & smbexec.py

Drittanbieter

• Windows Lateral Movement with smb, psexec and alternatives | nv2lt - Scratching the Surface
• GitHub - S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet: A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.