A municipal RoE bans reverse shells but allows SSH-based forwards when valid credentials exist. How should the tester choose a pivot channel?
Select an answer to reveal the explanation.
Short Explanation
If the client says reverse shells are off-limits but SSH forwards with real creds are fine, that is the menu—not a suggestion box. Approved channels beat clever banned ones. You adapt to the RoE and the auth you actually have.
Full Explanation
Pivot method selection is constrained by rules of engagement and available authentication. When reverse shells are prohibited but SSH-based forwarding is allowed with credentials, testers should use the approved path. Speed or trendiness does not override written bans. Professional judgment matches technique class to RoE and auth reality.