Linux Lateral Movement

Once you've got a foothold on a Linux box, this is your playbook for moving sideways through the network. It covers the practical stuff: hijacking SSH agents through socket manipulation, harvesting keys and credentials from common locations like bash_history and application configs, abusing D-Bus and systemd for privilege escalation across hosts, and setting up tunnels when you need to pivot deeper. The SSH agent hijacking section is especially solid, showing you how to monitor for forwarded agents and use them without the owner noticing. Also includes techniques for NFS exploitation and sudo token reuse that base models typically miss. It's comprehensive without being theoretical, assumes you already have initial access somewhere, and focuses on the next steps.