Graham Helton's blog
- title
- Graham Helton's blog
- type
- entity
- summary
- Red-team operator's blog at grahamhelton.com on SSH tradecraft, lateral movement, and offensive security tooling
- tags
- blog, security, red-team
- created
- 2026-05-21
- updated
- 2026-05-21
Personal blog of Graham Helton, security practitioner whose writing focuses on offensive-security tradecraft — how to actually use OpenSSH, ssh-agent, and other ubiquitous tools to traverse networks. The voice is first-person ("this is mostly for me") and his framing is that hands-on writing is how he internalizes concepts. Worth tracking for clear walkthroughs of living-off-the-land techniques on Unix-style targets.
Topic coverage:
- SSH port forwarding and tunneling
- ssh-agent abuse for lateral movement
- Red-team operational tooling
- Network pivoting
Ingested articles
- ssh-port-forwarding-cheatsheet — full walkthrough of -L/-R/-D/-J/-A/-g/-t and the ~? runtime console
Notable unread
- Zero Effort Private Key Compromise: Abusing SSH-Agent for Lateral Movement — referenced from the cheatsheet, source for ssh-agent-forwarding-risk
Linked from