A single compromised host is rarely the real objective; attackers spread from that foothold toward valuable systems. Lateral movement is the act of using access on one system to reach others, and pivoting is routing traffic through a compromised host to reach network segments otherwise unreachable. Understanding both shows how a small initial breach can cascade into broad compromise, and, crucially, why network segmentation, credential hygiene, and monitoring are the defenses that contain such spread.
Analogy🏏Cricket
🏏 Think of it like cricket: Active recon is the captain walking out to inspect the pitch on match morning, pressing the surface, checking the grass, watching how the ball behaves in the nets. Unlike studying old footage from afar, this inspection happens on the ground itself and is visible to everyone. Just as that inspection reveals conditions no video could, active scanning reveals live services no public record shows, and just as it happens with the ground's permission, scanning happens only within authorized scope.