Lateral Movement

RDP Session Hijacking – tscon and SharpRDPHijack

Hijack active/disconnected RDP sessions without credentials using tscon.exe or SharpRDPHijack, enabling lateral movement via existing authenticated sessions.