Exercise 1: Vertical Privilege Escalation vs. Lateral Movement — Possible Solution
====================================================================

VERTICAL PRIVILEGE ESCALATION
------------------------------
Per this chapter, "privilege escalation means gaining a higher level
of access than the initial foothold provided," and "vertical
escalation... moves upward within the same general context." The
example the chapter itself gives: "moving from a low-privilege web
application user to administrative access on the underlying server."
This is escalation because the tester ends up with MORE capability
than before, on essentially the same system/context they started on
— they didn't move anywhere else, they simply gained greater
authority over the same target.

LATERAL MOVEMENT
------------------------------
Per this chapter, "lateral movement means using an established
foothold on one system to reach other systems on the same network
that weren't directly reachable or vulnerable from outside." A
concrete example, drawn from the chapter's own material: a tester who
compromises one low-value internal system, then uses a credential
captured from that system (per the chapter's own "credential reuse"
point) to log into a completely different system on the same network
that was never itself vulnerable to the original exploit. This is
movement, not escalation — the tester didn't necessarily gain a higher
privilege level than they already had; they gained access to a
DIFFERENT system entirely, using the first system as a stepping
stone.

THE CORE DISTINCTION
------------------------------
Privilege escalation is about GOING UP in privilege on largely the
SAME target; lateral movement is about GOING SIDEWAYS to a DIFFERENT
target, potentially at a similar privilege level to where the tester
already was. The two are often combined in a real assessment (e.g.
escalate privileges on one system, then use that elevated access to
move laterally to another), but they answer different questions:
"how much MORE can I do here" vs. "what ELSE can I reach from here."

WHY THIS WORKS AS AN ANSWER
------------------------------
It uses the chapter's own definitions and its own stated example for
vertical escalation, constructs a matching concrete example for
lateral movement using the chapter's own credential-reuse material,
and names the core "up vs. sideways" distinction explicitly.