#lateral-movement — DÆMON//SEC

01 ADActive Directory Attack Methodology 2026-08-09 02 ADActive-Directory_cheat_sheet 2026-08-10 03 ADAttack #1 — Password Spraying 2026-08-10 04 ADAttack #54 — PsExec Remote Execution via SMB 2026-08-10 05 ADAttack #55 — WinRM Evil-WinRM Lateral Movement 2026-08-10 06 ADAttack #56 — RDP Lateral Movement and Hijacking 2026-08-10 07 ADAttack #57 — DCOM Lateral Movement 2026-08-10 08 ADAttack #58 — WMI Lateral Movement 2026-08-10 09 ADAttack #59 — SCM Service Manager Lateral Movement 2026-08-10 10 ADAttack #60 — Token Stealing and Impersonation 2026-08-10 11 ADAttack #75 — SCCM MECM Exploitation 2026-08-10 12 ADAttack #76 — MSSQL Server and Linked Server Abuse 2026-08-10 13 ADESC17 — ADCS Certificate Spoofing to Attack HTTPS-Enabled WSUS Clients 2026-08-10 14 ADEvil-WinRM & evil-winrm-py 2026-10-12 15 ADImpacket 2026-10-12 16 ADRun as Another User from an Evil-WinRM Session 2026-09-25 17 ADShadow Credentials — msDS-KeyCredentialLink Abuse 2026-08-10 18 TOOLxfreerdp 2026-08-29

☧ CPTS · ordered posts

Locked

Unlock with your Main_Key through local GPG.

Start the local GPG helper

In your cheatsheet checkout, run:

npm run unlock:helper

Open the link it prints, or paste its pairing code below. Keep the terminal open until GPG finishes.

Import an index you already decrypted

Download the encrypted index, then decrypt with GPG:

gpg --output report-index.json --decrypt report-index.gpg

Choose your decrypted JSON once to save access:

Your private key stays in GPG. The decrypted index is saved in this browser so you can reopen it after navigation, refreshes and restarts. Lock this browser or clear this site's browser data to remove the saved index. Nothing is uploaded.