skills.rest
utsavthakur
utsavthakurCOMMUNITY
Explore all skills by this author →
GitHub

linux-lateral-movement

Perform Linux lateral movement via SSH, credential harvesting, and pivoting.

Updated Jun 11, 2026
Search Tags:#SSH#linux#lateral movement#credential harvesting#network pivoting
One-click install
npx skills add https://github.com/utsavthakur/agenticskills --skill linux-lateral-movement-utsavthakur
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: linux-lateral-movement
Source: https://github.com/utsavthakur/agenticskills/tree/main/linux-lateral-movement
Command: npx skills add https://github.com/utsavthakur/agenticskills --skill linux-lateral-movement-utsavthakur

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides expert-level Linux lateral movement techniques, allowing users to pivot across Linux hosts securely and efficiently.

Core Features & Use Cases

  • SSH Agent Hijacking: Utilize SSH agent sockets to hijack SSH forwarding.
  • Credential Harvesting: Harvest SSH keys and credentials from various locations.
  • Network Pivoting: Tunnel traffic through compromised hosts and pivot across networks.
  • Shared Filesystem Abuse: Exploit shared filesystems like NFS and SMB/CIFS.
  • Sudo Token Reuse: Hijack sudo sessions for elevated privileges.
  • Systemd Service Manipulation: Create backdoors and manipulate services.

Quick Start

Use the linux-lateral-movement skill to pivot across Linux hosts using SSH agent hijacking.

Frequently Asked Questions about linux-lateral-movement

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform lateral movement across Linux hosts using SSH?▼

Linux lateral movement via SSH involves techniques like SSH agent hijacking and credential harvesting to pivot across networks. This Skill automates these advanced techniques to securely tunnel traffic through compromised hosts.

What is SSH agent hijacking and how does it work for network pivoting?▼

SSH agent hijacking exploits active SSH agent sockets to hijack SSH forwarding. It allows an attacker to reuse established sessions for network pivoting, bypassing the need to re-authenticate across targeted Linux hosts.

How do I harvest SSH keys and credentials on a compromised Linux machine?▼

Credential harvesting on Linux targets SSH keys and credentials from various system locations. This Skill automates the extraction process to gather necessary authentication data for expanding access across the network.

Does Linux lateral movement via SSH require administrative privileges?▼

Yes, performing advanced Linux lateral movement techniques like sudo token reuse and systemd manipulation requires administrative privileges. The Skill targets systems where SSH access and elevated permissions are already established.

Can I exploit shared filesystems like NFS for lateral movement on Linux?▼

Yes, shared filesystem abuse exploits NFS and SMB/CIFS mounts to pivot across Linux hosts. This technique allows credential harvesting and file manipulation through improperly configured network shares.

What is sudo token reuse and how is it used for privilege escalation?▼

Sudo token reuse hijacks active sudo sessions to maintain elevated privileges without re-entering a password. It enables seamless privilege escalation during lateral movement across Linux environments.

Related Skills

Explore More Software Engineering Skills→
wgpsecwgpsec
1.6k

post-exploit-linux

Plan and execute Linux post-exploitation workflows from initial access through privilege escalation.

Official
Advanced
rennerenne

connectivity-troubleshooting

Configure TCP keepalive and systemd overrides to resolve Netbird WireGuard ENOKEY errors.

Community
Advanced
zebbernzebbern
4.5k

SSH Penetration Testing

Automate SSH security assessments with enumeration, credential attacks, and vulnerability exploitation.

Community
Advanced
blacklanternsecurityblacklanternsecurity
253

pivoting-tunneling

Establish SSH, Ligolo-ng, Chisel, socat, and DNS/ICMP tunnels through compromised hosts.

Official
Advanced