# PTP LAB - PowerShell for Post-exploitation and Lateral Movement

**URL:** <https://legacy-community.ine.com/t/ptp-lab-powershell-for-post-exploitation-and-lateral-movement/1862>\
**Category:** Penetration Testing Professional\
**Tags:** red, security, lab, cybersec\
**Created:** [March 6, 2022, 5:09pm UTC](https://legacy-community.ine.com/t/ptp-lab-powershell-for-post-exploitation-and-lateral-movement/1862 "2022-03-06T17:09:56Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![ing.infantec-e6ab552](https://avatars.discourse-cdn.com/v4/letter/i/77aa72/32.png) [@ing.infantec-e6ab552](https://legacy-community.ine.com/u/ing.infantec-e6ab552)\
**Post date:** [March 6, 2022, 5:09pm UTC](https://legacy-community.ine.com/t/ptp-lab-powershell-for-post-exploitation-and-lateral-movement/1862/1 "2022-03-06T17:09:56Z")

</div>

Hi everyone.

I’m working on lab " PowerShell for Post-exploitation and Lateral Movement" of PTP course. When I try to launch the nmap on all 65535 ports on the host 172.17.80.100, the time to complete is always bigger (for example, after 4 minutes the time remaining will increase about one hour).

I saw the solution for this question and I saw that the time elapsed for the same scan was about five minutes.

![image](https://us1.discourse-cdn.com/flex015/uploads/ine/original/1X/2c695fe8af7c42d43e04345b1613cdcd86f57f24.png)

Of course, on the other host target the time of execution of scan is acceptable as happened for the others labs.

How this is possible? How I can continue with this lab?

Thank you,  
kind regards.  
Claudio.

---

<div class="post-metadata">

**Author:** ![ashwin-cb10e501](https://avatars.discourse-cdn.com/v4/letter/a/ac8455/32.png) [@ashwin-cb10e501](https://legacy-community.ine.com/u/ashwin-cb10e501)\
**Post date:** [March 7, 2022, 5:29pm UTC](https://legacy-community.ine.com/t/ptp-lab-powershell-for-post-exploitation-and-lateral-movement/1862/2 "2022-03-07T17:29:21Z")

</div>

Nmap scan will take time sometimes happens, instead first do the port scan alone with -v and divide the ports 2/3 parts so it will reduce the time… and at the ends try to use --open ( for only open ports ).