Network Attack

It handles the full lateral movement playbook: Kerberos attacks like AS-REP roasting and Kerberoasting, NTLM relay chains to LDAP for shadow credentials or RBCD, Active Directory enumeration with BloodHound, and pivoting with tools like Ligolo-ng and Chisel. The NTLM relay section is especially thorough, covering relays to ADCS for certificate theft and MSSQL for command execution. It also includes wireless attacks and protocol-level MitM work with Bettercap. You'd reach for this during internal pentests or red team engagements when you need to escalate from one compromised host to domain admin. The command examples are practical and ready to adapt.