Compromise of Jump Host to Reach Servers

In an authorized assessment, access scoped Windows targets from an established jump host using valid credentials over SMB or Windows Remote Management (WinRM). The examples are not a mandatory sequence: SMB share enumeration is optional, while Impacket PsExec (a benign whoami check) and PowerShell Remoting (an interactive WinRM session) are separate remote-access choices. This procedure assumes the jump host is already available and does not cover compromising it, WMI/DCOM, or stealth proxying.