+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Question about Pivoting (/showthread.php?tid=3024516)
Question about Pivoting - Lian - Nov 15, 2012
Hello guys. How are you doing?
So here is the scenario:
Backtrack is connected to Windows 8
Windows 8 is connected to Linux Server
Backtrack cannot communicate with Linux Server because they are not in the same subnet.
Using the latest java exploit I can get System in the Windows 8 Machine.
Question: There are many ways how to do pivoting, metasploit, ssh, ncat, proxychain.
I have tried all these but I haven't been able to scan the Linux Machine. For some reasons metasploit scan comes out blank. Do you guys have any idea what to do in order to get direct access from my backtrack via windows to the linux serer such that I can run commands on my Backtrack directly against Linux Server?
* - Vile Soul - Nov 15, 2012
theres your problem. you said windows 8
windows 8 =shit
* - Lian - Nov 15, 2012
(Nov 15, 2012 06:59 PM)ilikecake21 Wrote: theres your problem. you said windows 8
windows 8 =shit
I agree with you, I really hate it. But this is not the answer I am looking for :)
* - unname2012 - Nov 15, 2012
(Nov 15, 2012 06:57 PM)Lian Wrote: Hello guys. How are you doing?now,when backtrack connect to window 8 ,you should use feature route add in metasploit to add subnet,and then you can exploit linux server
So here is the scenario:
Backtrack is connected to Windows 8
Windows 8 is connected to Linux Server
Backtrack cannot communicate with Linux Server because they are not in the same subnet.
Using the latest java exploit I can get System in the Windows 8 Machine.
Question: There are many ways how to do pivoting, metasploit, ssh, ncat, proxychain.
I have tried all these but I haven't been able to scan the Linux Machine. For some reasons metasploit scan comes out blank. Do you guys have any idea what to do in order to get direct access from my backtrack via windows to the linux serer such that I can run commands on my Backtrack directly against Linux Server?
syntax :
metepreter>run get_local_subnets (get subnet)
msf>route add [gateway] [netmask] [sesseion id]
msf>route print (printing the resuft)
Regards
* - Lian - Nov 15, 2012
Yes as I already said above I am familiar with pivoting and I know how to use route command. Question is how to I run lets say a python script on my backtrack against let's say port 10.000 on Linux Server?
* - unname2012 - Nov 15, 2012
in this case,you should use payload sock4a
firstly ,setting SRVHOST is your IP,SRVPORT is your port
secondly you using route add feature
then,on backtrack,you using proxychain to load sock
ex : proxychain nmap -A -sS -sV -PN [IP server linux]