Windows Remote Code Execution Techniques

Extract credentials from LSASS

Mimikatz

Dumping LSA Secrets

Reset Password

DCSync

EDR Evasion Techniques

ExecuteDCOM

Pass the Hash

RDP/VNC

Run As

Password Spraying

:database:Database Lateral Movement

MSSQL Server Abuse

Oracle Server Abuse

MySQL Server Abuse

References

• https://cheats.philkeeble.com/active-directory/lateral-movement