thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

Pivoting

Using a compromised system as a relay to reach other networks or hosts that are not directly accessible to the tester or attacker.

Definition

Pivoting demonstrates weak segmentation, for example reaching an internal database network through a compromised DMZ server. Defenses include network segmentation, egress filtering, host firewalls and monitoring for unusual internal connections.

Example

A tester routes traffic through a compromised jump host to reach an otherwise isolated subnet.

Exam tip

Pivoting findings point to segmentation weaknesses.

Related terms