> For the complete documentation index, see [llms.txt](https://blog.hacktive.bebzounette.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/code-execution.md).

# Code execution

- [PSExec](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/code-execution/psexec.md)
- [SMBExec](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/code-execution/smbexec.md)
- [WMIexec / WMI](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/code-execution/wmiexec-wmi.md)
- [ATExec / SchTaskExec](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/code-execution/atexec-schtaskexec.md)
- [DCOMExec / DCOM](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/code-execution/dcomexec-dcom.md)
- [Powershell Remoting - WinRM](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/code-execution/powershell-remoting-winrm.md)
- [Crackmapexec](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/code-execution/crackmapexec.md)
- [Service Control (SC)](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/code-execution/service-control-sc.md)