skills.rest
ArianHobson333
ArianHobson333COMMUNITY
Explore all skills by this author →
GitHub

lateral-movement

Perform network lateral movement using Pass-the-Hash, WMI, WinRM, and SMB techniques.

7|1|Updated Apr 14, 2026
Search Tags:#pass-the-hash#tunneling#WinRM#SMB#network lateral movement#pass-the-ticket#WMI
One-click install
npx skills add https://github.com/ArianHobson333/claude-bug-bounty-stack --skill lateral-movement-arianhobson333
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: lateral-movement
Source: https://github.com/ArianHobson333/claude-bug-bounty-stack/tree/main/vendor/Decepticon/skills/post-exploit/lateral-movement
Command: npx skills add https://github.com/ArianHobson333/claude-bug-bounty-stack --skill lateral-movement-arianhobson333

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires CrackMapExec, Impacket, Rubeus, Mimikatz, Ligolo-ng, Chisel, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a comprehensive set of tools and techniques to perform network lateral movement within a compromised environment, enabling the user to move between hosts and escalate privileges.

Core Features & Use Cases

  • Pass-the-Hash (PtH): Execute commands via SMB using NTLM hashes.
  • Pass-the-Ticket (PtT): Use Kerberos tickets to gain access to targeted systems.
  • WMI Execution: Execute commands and scripts using the Windows Management Instrumentation service.
  • WinRM Execution: Use PowerShell remoting to execute commands on remote systems.
  • SMB Lateral Movement: Perform file operations and command execution via SMB.
  • Network Tunneling: Establish tunnels for secure communication between hosts.
  • Use Case: After gaining initial access to a system, use this Skill to move laterally within the network, bypassing security controls and escalating privileges.

Quick Start

Execute the lateral-movement skill to perform a Pass-the-Hash attack on the target system.

Frequently Asked Questions about lateral-movement

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform network lateral movement using Pass-the-Hash?▼

Pass-the-Ticket lateral movement uses Kerberos tickets to gain access to targeted systems. This technique enables remote command execution and system access within a compromised network environment during post-exploitation.

Can I use WMI and WinRM for executing commands on remote systems?▼

Yes, WMI and WinRM can be used for executing commands on remote systems. WMI utilizes the Windows Management Instrumentation service, while WinRM uses PowerShell remoting to execute commands during network lateral movement.

What tools do I need for network tunneling and lateral movement?▼

Network tunneling and lateral movement require tools like Ligolo-ng and Chisel to establish secure communication tunnels. Additional tools include CrackMapExec, Impacket, Rubeus, and Mimikatz for execution.

What is the best way to move laterally within a compromised network?▼

The best way to move laterally within a compromised network involves utilizing techniques like Pass-the-Hash, Pass-the-Ticket, and SMB operations. These methods bypass security controls while moving between hosts.

Does this lateral movement approach support PsExec and RDP execution?▼

Yes, this lateral movement approach supports PsExec and RDP execution. It enables remote command execution alongside WMI, WinRM, and SMB operations to facilitate moving between compromised hosts.

Related Skills

Explore More Software Engineering Skills→
Prohao42Prohao42
120

linux-lateral-movement

Automate lateral movement across Linux hosts using SSH agent hijacking and credential harvesting.

Community
Advanced
AcczdyAcczdy
2

conducting-internal-network-penetration-test

Simulate internal network penetration tests to reveal lateral movement and privilege escalation paths.

Community
Advanced
zebbernzebbern
4.5k

Linux Privilege Escalation

Enumerate and exploit privilege escalation paths on Linux systems.

Community
Advanced
Prohao42Prohao42
120

windows-lateral-movement

Execute lateral movement techniques on Windows systems for penetration testing.

Community
Advanced