Learn how to set up a dynamic SSH tunnel in this video.
- [Instructor] The final form of SSH tunnel…is a dynamic tunnel.…In this mode, the SSH client impersonates…a partial-SOCKS proxy server,…using the connectivity and identity of the SSH server…for processing all received connect requests.…We can use the proxy change tool…to navigate through the proxy.…I've got my Tinycore Linux server…running as 10.1.1.5 on a subnet called Pivonet,…and we can't access that directly from Kali.…
I have my Ubuntu server, which is dual homed…to Kali's network and Tinycore's network.…By setting up a dynamic port using SSH…between Kali and Ubuntu, I can access the subnet.…The default proxy change port is 9050.…I'll use this to set up a dynamic SSH tunnel…between Kali and my Ubuntu server on 10.0.2.12.…The dynamic connection is set up,…and SSH runs in the background.…
I'll now use proxy chains to gain access…to the Tinycore Linux on IP address 10.1.1.5.…We can see that the proxy chain's path has been confirmed,…and we get a root shell on 10.1.1.5.…And we can see it's the Tinycore Linux.…
Author
Released
12/11/2018- How tunneling works
- Running a local SSH tunnel
- Dynamic SSH tunneling
- Pivoting with Armitage and Metaspoit
- Exfiltrating using DET and DNS
- Covert exfiltration with Cachetalk
- Using PyExfil to exfiltrate over HTTPS
Skill Level Advanced
Duration
Views
Related Courses
-
Ethical Hacking: Penetration Testing
with Lisa Bock1h 29m Intermediate -
Penetration Testing Essential Training
with Malcolm Shore2h 29m Intermediate -
Penetration Testing: Advanced Kali Linux
with Malcolm Shore2h 22m Intermediate
-
Introduction
-
Disclaimer1m 16s
-
1. Preparing the Lab
-
2. Tunneling
-
Introduction to tunneling6m 21s
-
Secure Shell (SSH) tunneling1m 30s
-
Running a local SSH tunnel2m 27s
-
Dynamic SSH tunneling2m 26s
-
-
3. Pivoting
-
What is a pivot?1m 48s
-
Pivoting with Armitage4m 7s
-
Pivoting with Metasploit1m 45s
-
-
4. Exfiltration
-
Introduction to exfiltration3m 44s
-
Beaconing3m 46s
-
Installing PyExfil2m 34s
-
Exfiltrating using DET2m 19s
-
Enhancing the Cachetalk tool3m 26s
-
Exfiltrating using DNS3m 7s
-
Installing OpenPuff1m 50s
-
-
Conclusion
-
Next steps1m 38s
-
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.
CancelTake notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.
Share this video
Embed this video
Video: Dynamic SSH tunneling