XUTS LABS
Operator Flow
⌕ENUM◉WEB▰SQL⊞WIN◆LINUX♜AD⇄PIVOTING◇REPORTING⌬OT / ICS
React Flow
Press enter or space to select a node.You can then use the arrow keys to move the node around. Press delete to remove it and escape to cancel.
Press enter or space to select an edge. You can then press delete to remove it or escape to cancel.

Selected Node

Pivot Methodology

pivotroutestart

Purpose

Identify internal routes, dual-homed hosts, reachable subnets, local-only services, firewall constraints, and the safest tunnel method.

Why It Matters

Pivoting turns one compromised host into controlled visibility of hidden internal networks.

If You See This

  • •Internal interface found.
  • •Route table shows hidden subnet.
  • •Local-only service.
  • •Host can reach something attacker cannot.

Commands

Windows network context
ipconfig /all
route print
netstat -ano

Finds Windows interfaces, routes, and listeners.

Linux network context
ip a
ip route
ss -tulpn

Finds Linux interfaces, routes, and listeners.

Rabbit Holes

  • •Tunneling before understanding routes.
  • •Wrong subnet.
  • •Firewall blocks path.
  • •Not documenting route source.

Evidence to Capture

  • •Pivot host
  • •Internal subnet
  • •Reachable service
  • •Tunnel method