Pivoting Tunneling

Pivoting

  • moving to other networks through a compromised host
  • find more targets on different network segments

Tunneling

  • a subset of pivoting
  • encapsulates network traffic into another protocol
  • routes traffic through it
  • VPNs, specialized browsers
  • E.g. using HTTP/HTTPS GET POST to mask our C2 traffic

NIC (ifconfig)

  • tun0 interface - VPN is active
  • eth0 - a public routable IP address

Routing - Checking Route Tables

netstat -r