Linux Lateral Movement
While organizations commonly use Windows for workstations and Active Directory
services, the Linux operating system is often used for web and database servers,
infrastructure support, and more.
As penetration testers, it’s important to understand how to compromise Linux targets
and then pivot through them.
In this module, we’ll demonstrate a variety
of Linux-based lateral movement techniques.
First, we’ll leverage SSH and demonstrate how to steal keys and hijack open sessions
We will then explore large-scale DevOps technologies and leverage both
Ansible and Artifactory
Finally, we’ll demonstrate how Kerberos-enabled Linux systems
can create a bridge into Windows domains and leverage this for lateral movement.
In this module, we have configured the /etc/hosts file on our Kali machine
to resolve the hostnames in this module with their corresponding IP addresses.
The IP addresses in your lab will be different.
Not every approach discussed in this module requires root access,
but. as is the case with most Windows-based techniques,
many lateral movements require elevated privileges.