Editing Maintaining Access (section)

=== Common Techniques ===
* Creating hidden users or manipulating login mechanisms
* Establishing reverse shells or encrypted backdoors
* Installing persistence mechanisms such as cron jobs, services, or registry keys
* Leveraging legitimate tools for covert access (Living off the Land Binaries – [[LOLBins]])  
  * These are native binaries already present on the system, abused to avoid dropping custom tools.
* Abusing scheduled tasks, startup scripts, or init systems
* Using SSH keys, authorized_keys, or credential stuffing for future re-entry
* Employing webshells on reachable servers or admin panels
* Modifying boot processes or firmware for deeper persistence