#lateral-movement

Wiki 2

• Living Off The Land Attack pattern where an intruder uses legitimate, pre-installed system tools (shells, interpreters, package managers, debuggers) instead of dropping malware — harder to detect because every individual command is normal
• SSH agent forwarding risk Why ssh -A (and the ForwardAgent config keyword) hand the destination host the ability to authenticate as you anywhere your loaded keys reach