Pivoting
One of the most fundamentally important parts of pentesting is pivoting. If you don't take anything else away from reading this book, make sure that you bake pivoting into your brain. Pivoting is the technique of leveraging a compromised machine to exploit an additional machine that's deeper in the network. Several methods and tools can be used to perform this task. You can use tunneling, proxying, and port forwarding to accomplish this task. We touched on a couple of these methods already, including port forwarding with NAT rules with the pfSense firewall, which we did in this chapter, and proxying with FoxyProxy in Chapter 9, Ninja 308. There are also other tools we can use, such as the following:
- Proxychains
- SSH tunneling and port forwarding
- Chisel
These tools are what we will use to explore pivoting. We will use these tools to pivot from our Kali host, through our Windows 10 workstation, down to our Windows 7 machine, which is sitting at...
