Credential Reuse for Lateral Access

This SMB-focused example reuses an already obtained valid local or domain account password to authenticate to remote Windows SMB shares and, when the account has the required administrative rights, execute a command through SMB service-control tooling. The command examples use passwords; hash and Kerberos-ticket authentication require tool-specific syntax not shown here. Share enumeration alone does not establish remote command-execution rights.