← Back to search

Pivoting with sshuttle

Pivoting & Transfertool

Summary

Routes traffic to an internal subnet through an SSH connection, acting as a transparent VPN without extra setup on the target.

Walkthrough

Use sshuttle to reach an internal network through a compromised host over SSH, without configuring proxychains for every tool.

Steps

  • Provide the SSH jump host with -r <USER>@<IP>.
  • Specify the internal subnet to route (e.g. <IP>/24) so that traffic to those hosts is tunnelled through the SSH session.

Commands

bash

sshuttle -r <USER>@<IP> <IP>/24