Network Pentest

---
name: network-pentest
trigger: 内网 lateral 域渗透 域控 AD active directory 横向移动
tools: impacket + nuclei + port_scanner
x-alice-class: pentest
---# 内网渗透

## Phase 1 — 网络发现
```
python scripts/port_scanner.py --target {SUBNET} --top 100
```

## Phase 2 — AD枚举
```
impacket-GetADUsers / impacket-lookupsid
```

## Phase 3 — 横向移动
```
impacket-psexec / wmiexec / atexec
```

## Phase 4 — 凭据提取
```
mimikatz / lsass dump / SAM dump
```

输出 → exports/ad_pentest/