# Graham Helton's blog

Personal blog of Graham Helton, security practitioner whose writing focuses on offensive-security tradecraft — how to actually use OpenSSH, ssh-agent, and other ubiquitous tools to traverse networks. The voice is first-person ("this is mostly for me") and his framing is that hands-on writing is how he internalizes concepts. Worth tracking for clear walkthroughs of [[living-off-the-land]] techniques on Unix-style targets.

URL: https://grahamhelton.com

Topic coverage:
- SSH port forwarding and tunneling
- ssh-agent abuse for lateral movement
- Red-team operational tooling
- Network pivoting

## Ingested articles

- [[ssh-port-forwarding-cheatsheet]] — full walkthrough of -L/-R/-D/-J/-A/-g/-t and the ~? runtime console

## Notable unread

- [Zero Effort Private Key Compromise: Abusing SSH-Agent for Lateral Movement](https://grahamhelton.com/blog/ssh_agent/) — referenced from the cheatsheet, source for [[ssh-agent-forwarding-risk]]