sshLOLBIN
Acceso remoto y túneles (port forwarding con -L).
Binario legítimo del sistema (LOLBIN): no es una herramienta ofensiva, pero un atacante lo aprovecha porque suele estar ya instalado y levantar menos sospechas que subir una herramienta propia.
Cliente de shell segura para acceso remoto, pero también una de las mejores herramientas de pivoting: con -L, -R y -D monta port forwarding local, remoto y proxies SOCKS dinámicos para alcanzar la red interna sin subir binarios extra.
Familia Acceso, shells y transferencia
Flags -L -R -D -N -i
Conceptos Local port forwarding (SSH tunnel), Dynamic Port Forwarding (SOCKS), Remote Port Forwarding, Credential reuse
Cheatsheet SSH forwarding
Instalación
sudo apt install -y openssh-clientComandos útiles
Aparece en
Algunas máquinas donde se documenta su uso; no es una lista exhaustiva.
- AdmirerHackTheBox
- AlertHackTheBox
- AmaterasuProving Grounds Play
- AmbassadorHackTheBox
- BigPivotingDockerLabs
- BoardLightHackTheBox
- BookHackTheBox
- BountyHunterHackTheBox
- BreaksshDockerLabs
- BuscaloveDockerLabs
- ChemistryHackTheBox
- ClueProving Grounds Practice
- ConsolelogDockerLabs
- Dance-SambaDockerLabs
- Darkhole 2VulnHub
- DVR4Proving Grounds Practice
- ExpresswayHackTheBox
- FanatasticProving Grounds Practice
- HealHackTheBox
- HunitProving Grounds Practice
- Infovore 1VulnHub
- InstantHackTheBox
- LaboratoryHackTheBox
- LateHackTheBox
- LinkVortexHackTheBox
- NickelProving Grounds Practice
- NukemProving Grounds Practice
- OpenSourceHackTheBox
- PandoraHackTheBox
- PayDayProving Grounds Practice
- PeppoProving Grounds Practice
- PermXHackTheBox
- PhotobombHackTheBox
- PostfishProving Grounds Practice
- PsychoDockerLabs
- RedPandaHackTheBox
- ResourceHackTheBox
- ScrutinyProving Grounds Practice
- SeaHackTheBox
- ServmonHackTheBox
- ShoppyHackTheBox
- SightlessHackTheBox
- SorcererProving Grounds Practice
- SpiderSocietyProving Grounds Practice
- StaplerProving Grounds Play
- Symfonos 1 & 2VulnHub
- Symfonos 5VulnHub
- TricksterHackTheBox
- UnderPassHackTheBox
- VmdakProving Grounds Practice
- Vulnerable Lab (1 · 4 · 5)VulnHub
- WallpaperHubProving Grounds Practice
- WorkaholicProving Grounds Practice