{"id":15469,"date":"2021-07-29T13:08:57","date_gmt":"2021-07-29T07:38:57","guid":{"rendered":"https:\/\/www.varutra.com\/?p=15469"},"modified":"2022-12-02T12:27:39","modified_gmt":"2022-12-02T06:57:39","slug":"port-forwarding-pivoting-and-tunneling","status":"publish","type":"post","link":"https:\/\/www.varutra.com\/varutravrt3\/port-forwarding-pivoting-and-tunneling\/","title":{"rendered":"Port Forwarding – Pivoting and Tunneling"},"content":{"rendered":"


\nPort forwarding is a key activity in any network security<\/a> testing. Once we get an initial foothold into the victim network, our next stage is to make lateral movement inside the victim’s internal network, which is not directly accessible from outside the network. To access the internal network attacker pivot to a compromised machine and hence it is called pivoting. An attacker will use the compromised machine as pivoting point and break into other internal machines.<\/p>\n

\"Port<\/p>\n

Fig. DMZ and internal network (LAN)<\/strong><\/p>\n

To access the internal network compromised machine should be connected to the internal network. Let us suppose the attacker has access to machine ABC, then this machine should have interfaces like eth0, eth1(one of which IS for public communication and another for internal communication). One can check Ethernet interfaces with network commands (windows use ipconfig \/all, Linux uses ifconfig).<\/p>\n

\"Multiple<\/p>\n

Fig.Multiple Ethernet Interfaces<\/strong><\/p>\n

There are few techniques to access the internal networks we will discuss some of them here. According to port open on machine and firewall configuration rule set for inbound and out-band techniques might differ.<\/p>\n

We will discuss some most used techniques as mentioned below:<\/p>\n

    \n
  1. Routing with Metasploit.<\/li>\n
  2. SSH Tunneling.<\/li>\n<\/ol>\n