Questions tagged [pivoting]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
32 views

How can I get a meterpreter session back to my attack box from subnet via pivot?

I have a lab I am dealing with and need help to get a meterpreter session on this win 7 system. My buffer overflow works great back to the pivot box. However since my attack box is not reachable from ...
user avatar
  • 101
1 vote
0 answers
96 views

call http-webpage in local browser, where the webserver is only reachable through proxychains (as it sits in a different network)

I have the following proxychains.conf [...] [ProxyList] # add proxy here ... # meanwile # defaults set to "tor" #socks4 127.0.0.1 9050 # <ip_prox_1> http 10.10.10.100 3128 # ...
user avatar
0 votes
1 answer
927 views

pivoting without metasploit to get reverse shell

I have an exam next week. I need help. This is my lab: attacker machine (kali) : 192.168.1.81 1st hacked machine (Windows 10) : 10.10.10.130 target (Windows 7) : 10.10.10.135 (...
user avatar
1 vote
0 answers
657 views

How to use Chisel for Port Forwarding?

I'm getting started learning pentesting and I came across this situation. Privilege Escalation Running WinPeas I noticed a change to escalation bypass UAC. I was thinking to use a local exploit (...
user avatar
  • 129
0 votes
1 answer
201 views

Meterpreter pivot with a bind_named_pipe

I have a pivot setup on a compromised windows 10 box and am trying to get an SYSTEM shell on a separate machine in the target network. I have successfully done this abusing an unquoted service path ...
user avatar
  • 189
0 votes
1 answer
365 views

How to stop outgoing SSH on port 443

Let us say that a small company has an internal network for employees. All employees are granted Internet access via a NAT device (not a proxy) and perimeter firewall only allows outgoing connections ...
user avatar
  • 155
1 vote
1 answer
369 views

Help understanding pivoting and port forwading

I am trying to learn about pivoting/port forwarding and how to take full advantage of it. If I am connected to a network with the ip 192.168.0.10 and can see that 192.168.0.11 has access to a website ...
user avatar
0 votes
0 answers
189 views

ms08_067_netapi exploit & pivoting problem

I'm having troubles with ms08_067_netapi. I have a private network with a web server (10.10.2.10), windows 7 (10.10.2.8) and windows XP (10.10.2.9). I'm hacking from outside the private network with ...
user avatar
  • 1
1 vote
0 answers
750 views

Metasploit: Lateral movement with named pipe pivot

I‘m trying to demonstrate lateral movement to a windows machine that is not directly reachable and should connect back via named pipe: Windows machine w1 does reverse_tcp/reverse_https to attacker. ...
user avatar
  • 1,111
3 votes
1 answer
862 views

Metasploit: pivoting to machine without internet access

Let's imagine the following (not uncommon) scenario: I'm doing a pentest from the outside I have a meterpreter session from a company PC that´s within their infrastructure (Let´s say w/ reverse HTTPS)...
user avatar
  • 1,111