Linux:
Lateral Movement
SSH tunneling, port forwarding, and credential reuse for pivoting
Credential Reuse for Lateral Movement on Linux
Techniques for exploiting reused credentials across Linux systems to move laterally, covering SSH, sudo abuse, and credential harvesting from config files.
SSH Port Forwarding and Tunneling on Linux
Covers SSH local, remote & dynamic port forwarding techniques to tunnel traffic, bypass network restrictions and pivot through compromised Linux hosts.
Linux lateral movement covers techniques for pivoting from a compromised host to other systems in the network. Key methods include reusing SSH keys found on disk, leveraging harvested credentials against other hosts, exploiting trust relationships between systems, and abusing NFS shares with weak export configurations.
The subpages detail each pivot technique with practical examples for moving through Linux environments.