Job Types

Command --> Aggressor Script --> UI

1) chromedump (Command)

2) dcsync --> &bdcsync

3) elevate --> &belevate --> [beacon] -> Access -> Elevate

4) [beacon] -> Access -> Golden Ticket (UI)

5) hashdump --> &bhashdump --> [beacon] -> Access -> Dump Hashes

6) keylogger --> &bkeylogger --> [Process Browser] -> Log Keystrokes

7) logonpasswords --> &blogonpasswords --> [beacon] -> Access -> Run Mimikatz

8) [beacon] -> Access -> Make Token (use a hash) (UI)

9) mimikatz --> &bmimikatz

10) &bmimikatz_small (Aggressor Script)

11) net --> &bnet --> [beacon] -> Explore -> Net View

12) portscan --> &bportscan --> [beacon] -> Explore -> Port Scan

13) powerpick --> &bpowerpick

14) printscreen --> &bprintscreen

15) pth --> &bpassthehash

16) runasadmin --> &brunasadmin

17) [target] -> Scan (UI)

18) screenshot --> &bscreenshot --> [beacon] -> Explore -> Screenshot ([Process Browser]) -> Screenshot (Yes)

19) screenwatch --> &bscreenwatch --> [Process Browser] -> Screenshot (No)

20) ssh --> &bshh --> [target] -> jump -> ssh

21) ssh-key --> &bssh_key --> [target -> jump -> ssh-key

22) [target] -> jump -> [exploit] (use a hash)

23) browserpivot --> &bbrowserpivot --> [beacon] -> Explore -> Browser Pivot

24) dllinject --> &bdllinject

25) inject --> &binject --> [Process Browser] -> Inject

26) shinject --> &bshinject

NOTE: Some approaches are used differently (example: Process injection spawn vs Process injection explicit) See Process Injection for more details

27) psinject --> &bpsinject