I have a PCAP basically stating two things:
- An ARP request
who has 192.168.a.b? Tell 192.168.b.c
An ARP answer with the MAC address follows of course.
The following requests all access an web app, which seems to be .php based (I can judge from the .php endings):
- from 192.168.x.x to 10.x.x.x (access web app)
The traffic from point 2 is purely HTTP TCP and I need to reach the 10.x.x.x network, since I want to reach the web app.
I am connected via a VPN tunnel and I could discover the 10.86.74.7 is somewhy and somehow reachable by nmap and shows 53 port open, so it's probably DNS.
I tried the following:
sudo ip route add 10.x.x.x 192.168.b.c
But this doesn't seem to reap any results... How do I further pivot and access the web app?