Network Attack & Lateral Movement

When to Activate

• Internal network penetration testing
• Active Directory domain compromise
• Lateral movement after initial access
• Network protocol exploitation
• Wireless security assessment
• Traffic interception and manipulation

Active Directory Attacks

Enumeration

# BloodHound collection
bloodhound-python -d $DOMAIN -u $USER -p $PASS -c all -ns $DC_IP
# or SharpHound
.\SharpHound.exe -c all --zipfilename output.zip