Pivoting with sshuttle
Pivoting & Transfertool
Summary
Routes traffic to an internal subnet through an SSH connection, acting as a transparent VPN without extra setup on the target.
Walkthrough
Use sshuttle to reach an internal network through a compromised host over SSH, without configuring proxychains for every tool.
Steps
- Provide the SSH jump host with
-r <USER>@<IP>. - Specify the internal subnet to route (e.g.
<IP>/24) so that traffic to those hosts is tunnelled through the SSH session.
Commands
bash
sshuttle -r <USER>@<IP> <IP>/24