Internal Pivot, Network Enumeration, & Lateral Movement

**Executive Summary:** This write-up details an internal penetration-testing technique: after gaining foothold and elevating privileges via Group Policy Preferences and DLL hijacks, the operator performs network discovery by pinging potential ".1" gateway addresses across a class B (/16) space using a Windows FOR loop with PING and TTL manipulation to discover router gateways and map client/server subnets for broader lateral-access opportunities.