Lateral Movement

In many cases an attack starts with compromising a single asset then using that asset as a jump point to access more sensitive resources.

Note

This action of branching out from one resource to other resources on your network is called lateral movement. Cyberattackers use lateral movement as a core tactic, moving today’s advanced persistent threats (APTs) far beyond yesterday’s more simplistic cyberattacks. Internal network security teams must work overtime to detect lateral movement and stop it in its tracks.

Now that we have access to the internal network let’s see what else we have access to. Start by opening a terminal

For starters lets perform a port scan, this will give us some insight into other servers on the network. Run nmap 192.168.40.0/24 to perform a port scan of our internal network and let’s review the results.