domains / families / security / linux-lateral-movement

linux-lateral-movement

separate

Linux lateral movement playbook. Use after gaining initial access to pivot across Linux hosts via SSH hijacking, credential harvesting, internal pivoting, D-Bus exploitation, sudo token reuse, and shared filesystem abuse.

When to use

• SSH agent hijacking
• SSH key harvesting
• credential harvesting
• D-Bus exploitation
• network pivoting
• sudo token reuse
• systemd manipulation
• shared filesystem abuse

When not to use

• gaining root on the current host before pivoting
• bypassing restricted shells or security modules
• escaping containerized hosts
• pivoting into a Kubernetes cluster
• exploiting discovered internal services

Skill page

Source