Pivoting, Tunneling, and Port Forwarding
Rpivot
Rpivot is based on python, one of the highlights is the construction of reverse socks tunnel, which can effectively circumvent firewall inbound rules
Windows port forwarding - LOL
Port forwarding can be created directly through the built-in netsh tool
netsh interface portproxy add v4tov4 listenaddress=x.x.x.x listenport=8888 connectaddress=x.x.x.x connectport=9999
Check port forwarding status
netsh interface portproxy show v4tov4
ICMP tunnel
Introduced ICMPdoor for C2 in thm
Here ptunnel can be used to build a tunnel through ICMP
Socks over RDP
SocksOverRDP can establish a socks tunnel through rdp
It injects dll through regsvr32, and then runs mstsc.exe to start listening, connect to rdp and then run server to build it