Definition
Pivoting is the technique of using a compromised system as a stepping stone to access other systems or networks within the same environment. Attackers perform pivoting by establishing a connection from the initial foothold to a new target, effectively moving laterally through the network. This maneuver is crucial for attackers aiming to expand their access, exfiltrate data, or achieve deeper control over the victim's infrastructure. For instance, an attacker might compromise a web server and then pivot to access internal database servers that are not directly exposed to the internet. It differs from initial access, which is the first entry point into a network. Pivoting is a common tactic tested in cybersecurity certifications like CompTIA Security+ and CySA+.