Chapter 1
Engagement Management
Course: Comptia Pentest Pt0 003
Subject: Comptia Pentest Plus
Chapter: Post Exploitation And Lateral Movement
Lateral movement refers to the techniques attackers use to move through a network after gaining initial access. Instead of attacking a single system, adversaries attempt to expand their foothold, escalate privileges, and compromise additional systems to reach their final target, such as domain controllers, sensitive databases, or intellectual property.
1. Pivoting
Pivoting is a specific form of lateral movement where an attacker leverages a compromised system as an access point to reach other systems within the network. This technique is commonly used when an attacker cannot directly access target systems from their entry point.
1. Pass-the-Hash (PtH)
Attackers steal NTLM password hashes and use them to authenticate on other systems without knowing the plaintext password.
Example attack: Using Mimikatz to extract and pass hashes
powershell
CopyEdit