Lateral Movement

PowerShell Remoting - Enabled by default on Server 2012 onwards.

Invoke-Command -FilePath C:\my\power\shell\script.ps1 - ComputerName webserver.myhackingblog.local  ## This will allow script1 to be executed on the webs erver assuming permissions are present. Can be used to spray a ps script but be cauutios of doing that as it may impact many production servers.