Howlsec
HOWLSEC
offensive security
// notes/ Pivoting & Tunneling
🚀

Pivoting Good To Know Metasploit

Notes from oscp.adot8.com — post exploitation.

#post exploitation#adot8
source · oscp.adot8.com · post-exploitation/pivoting_good-to-know_metasploit ↗

Metasploit

Get chisel, proxy chains setup, launch metasploit and obtain a meterpreter session

code
01proxychains msfconsole

Route traffic to new network

code
01meterpreter > run autoroute -s 172.16.2.0/24
02meterpreter > bg

Scan target

code
01use auxiliary/scanner/portscan/tcp
02set RHOSTS 172.16.2.5
03set THREADS 10
04run

Port Forward

code
01portfwd add -L 127.0.0.1 -l 53 -p 53 -r 172.16.2.5
02portfwd add -L 127.0.0.1 -l 88 -p 53 -r 172.16.2.5