Explain the concept of pivoting in post-exploitation.

• A. Pivoting refers to pivoting the focus of the report to different stakeholders.
• B. Pivoting is about shifting from initial foothold to other internal networks.
• C. Pivoting is the technique of patching vulnerabilities.
• D. Pivoting involves using a compromised host as a pivot point to reach other network segments that are not directly accessible.

Answer: (D)

Pivoting in post-exploitation means using a compromised host as a launch point to reach other parts of the network that aren’t directly accessible from your own machine. Once you’ve gained control of a system inside the target environment, you configure that host to forward traffic, act as a proxy, or establish tunnels so you can access additional assets behind segmentation, firewalls, or separate networks. This lateral movement lets you enumerate, access, or exfiltrate from systems that would be unreachable otherwise. It’s a technique that relies on the existing foothold to extend reach, rather than patching vulnerabilities or shifting focus to different stakeholders.