Lateral movement

# Get the scheduled task
$task = Get-ScheduledTask -TaskName "OpenEmail"

# Get the action associated with the task
$action = $task.Actions | Select-Object -First 1

# Extract the executable path from the action
$executablePath = $action.Arguments.Split('"')[1]

# Output the executable path
Write-Output "Executable Path: $executablePath"

$Reply.Body = "Cyb3rN3t1C5{Y0u_C@nt_Ph!`$h_M3}"

Host Recon

Sharup --audit

Privilege Escalation