Pivoting Tunneling
Pivoting
- moving to other networks through a compromised host
- find more targets on different network segments
Tunneling
- a subset of pivoting
- encapsulates network traffic into another protocol
- routes traffic through it
- VPNs, specialized browsers
- E.g. using HTTP/HTTPS GET POST to mask our C2 traffic
NIC (ifconfig)
tun0
interface - VPN is activeeth0
- a public routable IP address
Routing - Checking Route Tables
netstat -r