TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

Black Hills InfoSec

Forwarding Traffic Through SSH

Kassie Kimball · 2023-02-23 · Read original ↗

ATT&CK techniques detected

4 predictions
T1572Protocol Tunneling
99%
“##sctl - w net. ipv4. conf. tun0. forwarding = 1 sysctl - w net. ipv4. conf. ens36. forwarding = 1 also enable nat on the target system so that incoming packets to the target system know where to go. iptables - t nat - a postrouting - o < interface > - j masquerade where < interf…”
T1090.001Internal Proxy
86%
“. in this case, you can use the following command for dynamic port forwarding. the following command will start a socks proxy on port 1080 on the local machine. ssh - d 1080 [ email protected ] this will create a local socks proxy which will forward any incoming connection to loc…”
T1090.001Internal Proxy
84%
“forwarding traffic through ssh forwarding traffic through ssh this was meant to be an openssh how - to blog, but since i had time, i decided to read the man pages ( manual pages that you can access on a linux terminal by typing man ssh ) and had fun chasing every possible rabbit …”
T1090.002External Proxy
50%
“check with the command ss - at ' ( dport = : 22 ) '. after the tunnel is established, we can interact directly with the internal network without having to use proxychains, conduct syn scans, and interact with other protocols, such as icmp or udp. closing thoughts while a vpn setu…”

Summary

Fernando Panizza // This was meant to be an OpenSSH how-to blog, but since I had time, I decided to read the man pages (manual pages that you can access […]

The post Forwarding Traffic Through SSH appeared first on Black Hills Information Security, Inc..