WinRS for Lateral Movement
It's possible to use a native Windows binary
winrsto connect to a remote endpoint via
winrs -r:ws01 "cmd /c hostname & notepad"
Below shows how we connect from
WS01and execute two processes
notepadand the process partent/child relationship for processes spawned by the