tunneling-and-pivoting

SSH tunneling establishes network access through compromised hosts using local, remote, and dynamic port forwards. Multi-hop pivoting chains these SSH tunnels to route connections sequentially across multiple internal hosts.

Pivoting through a compromised host involves creating a tunneling plan using techniques like reverse SOCKS proxies, Chisel, or Ligolo-ng. This enables controlled exploration and routing traffic into otherwise unreachable internal network segments.

Yes, DNS tunneling and ICMP tunneling encapsulate network traffic within allowed protocol packets to bypass port restrictions. This Skill provides step-by-step guidance for configuring these alternative tunneling methods during penetration testing.

Yes, the playbook covers Windows pivoting considerations and detailed ProxyChains configuration. It provides structured commands for routing traffic through established tunnels across diverse operating system environments.

Use Chisel or Ligolo-ng when standard SSH dynamic port forwarding is insufficient or blocked. These tools establish reverse SOCKS proxies and alternative tunneling paths, offering flexible routing for complex, multi-layered internal network access scenarios.