Fileless Lateral Movement
As mentioned previously, there are only a small number
of lateral movement techniques available on a Windows system
that do not rely on vulnerabilities.
Some, like PsExec and DCOM,
require that services and files are written on the target system.
Other techniques, such as PSRemoting, require ports to be open in the firewall
that are not always ermitted by default.
In the following sections, we are going to discuss and implement
a variant of PsExec that neither writes a file to disk
nor creates an additional service to obtain code execution,
both of which may aid in bypassing detection.