> For the complete documentation index, see [llms.txt](https://cas-cyber.gitbook.io/cas-cybersecurity/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cas-cyber.gitbook.io/cas-cybersecurity/windows-hacking/winattack-lab.md).

# WinAttack LAB

![](https://3977837039-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MfT0VPyK6X13Egd9pzy%2Fuploads%2FrhyEvWNNvG1Nx9wcRAMO%2Fintro01.png?alt=media\&token=8c980695-f035-4f0b-b57a-aea6817c97b7)

## Modules

* [01 - Host Discovery with nmap](/cas-cybersecurity/windows-hacking/winattack-lab/module-01.md)
* [02 - Situational Awareness / Privilege Escalation](/cas-cybersecurity/windows-hacking/winattack-lab/module-02.md)
* [03 - AD Information Gathering](/cas-cybersecurity/windows-hacking/winattack-lab/module-03.md)
* [04 - Mimikatz](/cas-cybersecurity/windows-hacking/winattack-lab/module-04.md)
* [05 - Pass the hash](/cas-cybersecurity/windows-hacking/winattack-lab/module-05.md)
* [06 - Situational Awareness on FS1](/cas-cybersecurity/windows-hacking/winattack-lab/module-06.md)
* [07 - Password Spraying](/cas-cybersecurity/windows-hacking/winattack-lab/module-07.md)
* [08 - Lateral movement to WS1](/cas-cybersecurity/windows-hacking/winattack-lab/module-08.md)
* [09 - Credential Dumping on WS1](/cas-cybersecurity/windows-hacking/winattack-lab/module-09.md)
* [10 - Abusing Domain Admin](/cas-cybersecurity/windows-hacking/winattack-lab/module-10.md)

![](https://3977837039-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MfT0VPyK6X13Egd9pzy%2Fuploads%2F7UDrkiCyGIaLA3aRtV8E%2Fintro02.png?alt=media\&token=6ed78aed-d465-488c-a7b9-03af23965414)
