the_open_door
coffee
ESEN
← Cheatsheets

Pivoting & tunnelling

Reaching the internal network: SSH port forwarding, chisel, proxychains and friends.

grep>
SSH forwarding6 commands
  • Local (-L)
  • Remote (-R)
  • Dynamic (-D)
  • Check
Chisel6 commands
  • Reverse SOCKS
  • Reverse port
  • Direct
  • Transfer
proxychains6 commands
  • Usage
  • Config
socat, ligolo & Meterpreter23 commands
  • socat
  • Ligolo-ng
  • Chisel
  • sshuttle
  • SSH ProxyJump
  • Meterpreter
  • Webshell tunnel
Windows redirectors & exotic tunnels13 commands
  • sshuttle / plink
  • netsh portproxy
  • Exotic tunnels (DNS/ICMP)
  • SocksOverRDP