Pivoting, Reporting, & Professional Practice

Explain the concepts of pivoting, port forwarding, and tunneling in a compromised network.

Use tools like `chisel` or `ssh` to pivot from a compromised host into an internal network.

Perform lateral movement by reusing compromised credentials (e.g., Pass-the-Hash).

Define the objectives, scope, and Rules of Engagement (RoE) for a professional penetration test.

Effectively navigate and interpret bug bounty program policies and scopes.

Write a clear and actionable vulnerability report that includes a description, impact, and remediation steps.

Assign a CVSS score to a vulnerability based on its technical characteristics and impact.

Develop a personal methodology for approaching a new target in a bug bounty or penetration testing engagement.