lateral-movement

Active Directory

Pass-the-Hash and Pass-the-Ticket in Practicew

A hands-on guide to NTLM Pass-the-Hash and Kerberos Pass-the-Ticket attacks, with practical tooling and Blue Team defenses.
Linux Privesc

SSH Key Hunting and Lateral Movement on Linux

Find SSH private keys, abuse authorized_keys and known_hosts, and pivot via agent forwarding across Linux hosts.