Metasploit Penetration Testing Cookbook - Third Edition

Getting ready

Before starting with the recipe, let's first understand pivoting in detail. Pivoting refers to the method used by penetration testers which uses a compromised system to attack other systems on the same network. This is a multilayered attack in which we can even access areas of the network that are only available for local internal use, such as the intranet. Consider the scenario shown in the following diagram:

The attacker can compromise a web server that is connected to the internet. Then, the attacker uses the compromised server to access the internal network. This is a typical scenario that involves pivoting. In our lab, we ...