Pivoting Cheat Sheet
The Pivoting Cheat Sheet by SANS is a pocket reference guide that provides various options for navigating and pivoting through different environments and situations, offering a method that fits each situation. This cheat sheet covers various prompts, including Windows cmd.exe, PowerShell, and Linux, and helps users find a method that suits their needs. This comprehensive guide models an attacker pivoting through to reach SSH on a victim host, substituting hosts and ports as needed. The diagram in the center of the cheat sheet helps to illustrate the process. This resource is essential for anyone looking to improve their skills in navigating and pivoting through different environments and situations.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
A comprehensive Windows command-line reference guide for security professionals, system administrators, and incident responders.
Utilizing SIEM, SOAR, and EDR technologies to enhance security operations with a focus on reducing incident response time.
APFS is a proprietary file system developed by Apple for macOS, offering improved performance, security, and reliability.
A quick reference guide for the VI editor, covering commands and modes.
A comprehensive guide to hardening OpenLDAP on Linux using AppArmor and systemd, providing a defense in depth approach to securing LDAP deployments.
A tool for testing and analyzing RFID and NFC tags, allowing users to read and write data, and perform various attacks and tests.
A behavior-based malware detection system for Android platforms that uses crowdsourcing to detect anomalies and malware in applications.
A comprehensive resource for threat hunting in Active Directory environments, covering tracking command-line/PowerShell activity, Kerberoasting detection, auditing attacker activity, and monitoring enterprise command-line activity.
A comprehensive guide for system administrators to detect and identify potential security threats on Windows 2000 systems.
PINNED
Proton Pass is a cross-platform password manager that provides encrypted storage, password generation, and security monitoring features with integrated 2FA and dark web monitoring capabilities.
NordVPN is a commercial VPN service that encrypts internet connections and hides IP addresses through a global network of servers, featuring integrated threat protection and multi-device support.
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.