linux-lateral-movement

What problem does it solve?

This Skill enables penetration testers to bypass security controls and move laterally across Linux-based systems post-compromise, identifying critical assets and exfiltrating data.

Core Features & Use Cases

• SSH Agent Hijacking: Bypass SSH authentication to use victim credentials for lateral movement.
• Key Harvesting: Extract and utilize private keys from the victim's environment.
• Credential Harvesting: Harvest system, environment, and configuration credentials for lateral movement.
• D-Bus Exploitation: Abuse systemd and PolicyKit through D-Bus services for privileged access.
• Network Pivoting: Use SSH tunnels and alternative port forwarding to access internal networks.
• Shared Filesystem Abuse: Exploit mounted file shares to spread laterally across networks.
• Sudo Token Reuse: Hijack sudo sessions to maintain persistence without requiring credentials.
• Systemd Service Manipulation: Inject code into systemd services for a persistent backdoor.

Quick Start

Run the skill with 'use linux-lateral-movement -target http://target-machine -ssh-user user -ssh-pass secret' to begin the lateral movement process on a Linux host.