Turning access into position¶
Access permits network interaction, capability performs meaningful action, and position largely determines operational value. Converting access into a new position spends a finding, introducing specific prerequisites, credential expiration limits, and detection costs.
Exploitation chains distinct technical actions. Reading a local configuration file may recover plaintext credentials, which can enable further authentication or privilege escalation. Access to process memory may then reveal cached credentials, session material, or Kerberos tickets, depending on the operating environment. These chains require active execution, separating them from structural dependencies that exist regardless of adversary activity.
Valid credentials and hijacked live sessions may provide execution authority without requiring local host ownership. Leveraging trust relationships involves authenticating through federation, single sign-on, or Active Directory delegations rather than bypassing authentication mechanisms.
- Distinguishing interaction from capability
- Spending capabilities for lateral movement
- Operational reach and positional value
- Supply chain access and third-party infrastructure
- Getting past the login page
- What honours what
- Getting the lid off
- Getting something of one’s own to run
- Overflowing the bin on purpose
- Crypto-attacks
- Reverse engineering
- Slipping through the cracks
- The art of becoming part of the furniture
Re-map reachability from the new position, ask again what is there, or read what the move cost in What changed, and what it cost.