Pivot Literacy
Pivot concepts inside YOUR lab RoE — tunnels and proxies named, no stranger-network bridging.
Visual · t19_pivot_literacy
Pivot = reach new in-scope hosts via compromised lab hop. RoE VLAN only. Original Cyberlium.
Pivot through the lab jump box in your diagram — not through the café Wi-Fi into someone else's subnet.
Pivoting uses a compromised lab host as a hop to reach other in-scope targets — concepts include port forwarding, SOCKS proxies, VPN-style tunnels, and double-hop routing literacy. Tools categories (ssh -D, chisel, ligolo named as concepts) run ONLY between $LAB_VM hosts listed in RoE on isolated lab network. Defenders detect unexpected internal flows, new listening ports on jump hosts, and unusual authentication chains. Never pivot from lab into dorm /24, employer production, or cloud tenants outside scope. If brief does not list a segment, pivot stops — document as scope limit in report.
1. Pivot concepts
Jump host, local port forward, dynamic SOCKS, reverse tunnel — map to YOUR lab network diagram.
Each hop must appear in RoE asset list — no 'helpful' discovery of new subnets.
Command guide
Try these commands — Pivot concepts
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Pivot — lab VLAN named in RoE only Lateral movement literacy — https://attack.mitre.org/tactics/TA0008/
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install nmap
macOS:
Command — copy this
brew install nmap
Windows:
Command — copy this
choco install nmap # or download https://nmap.org/download.html
═══ LINUX / macOS ═══
Command — copy this
source "$HOME/cyberlium-lab/t19-lab.env" nmap -sn "$LAB_HOST" grep pivot "$HOME/cyberlium-lab/t19-postex.txt" 2>/dev/null || echo 'pivot: lab VLAN only'
Primary tools to practice this lesson: nmap, grep. Reference sites: Pivot; Lateral movement literacy (https://attack.mitre.org/tactics/TA0008/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Defender view
Monitor east-west traffic, restrict workstation-to-workstation RDP/SSH, segment lab from corp.
Jump host hardening: no internet egress for admin tier, log dual-homed connections.
3. RoE-only pivot
Lab VLAN: e.g., 10.10.10.0/24 in brief — pivot within that block only.
Bridged adapter to home LAN is stop condition — fix topology before pivot lab.
4. What you ship: pivot literacy diagram
Lab network sketch with allowed hops + two defender detections + NEVER out-of-RoE pivot sentence.
5. What you record before the next lesson
Pivot diagram path.
6. Wrong vs right: stranger nets vs YOUR lab VMs
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
- Wrong: SOCKS pivot from lab VM into roommate's subnet 'for realism.'
- Right: Name pivot concepts inside RoE. Next: No Cover-Tracks Crime.
Mission: pivot literacy
1) Sketch $LAB network with jump host. 2) Name port forward vs SOCKS in one line each. 3) Write two defender detections. 4) Write NEVER pivot outside RoE VLAN.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “When brief omits segment — stop or ask?”
APPLY: Pivoting in course means:
APPLY: True or False: Pivot into dorm subnet is lab.
APPLY: Defenders detect pivots via:
No Cover-Tracks Crime
Part of Penetration Testing with AI — Post-Ex and Pivoting Literacy.
Lab — Post-Ex
Part of Penetration Testing with AI — Post-Ex and Pivoting Literacy.
Quiz — Post-Ex
Part of Penetration Testing with AI — Post-Ex and Pivoting Literacy.