A penetration tester has successfully accessed a web server using an exploit in the user-agent string for Apache Struts. The tester then brute forces a credential that provides access to the back-end database server in a different subnet. This is an example of:

Question

Quizplus · Accepted Answer

Pivoting refers to the technique of using a compromised system to access other systems or networks that are not directly accessible, as demonstrated by the tester accessing the database server in a different subnet.

A Penetration Tester Has Successfully Accessed a Web Server Using