How To Pivot Through a Network with Chisel
Source: YouTube · John Hammond · published Sep 14, 2023 · 33:47
This video demonstrates using Chisel for network pivoting in penetration testing, showing how to access internal networks through a compromised pivot machine 0:14.
Key Takeaways:
• Chisel simplifies network pivoting by creating tunnels between an attacker machine (Kali) and a compromised pivot system with dual network interfaces 1:28, 3:36
• The presenter demonstrates reconnaissance using ping sweeps 4:30 and a static nmap binary on the pivot machine to discover internal systems 7:40
• Setting up Chisel involves running a server in reverse mode on Kali with SOCKS proxy enabled 15:43 and a client on the pivot machine 17:10
• The SOCKS proxy approach is superior to individual port forwards as it allows broader access to the entire internal network 20:04
• Proxychains and FoxyProxy can be configured to route traffic through the Chisel SOCKS proxy for command-line tools and browser access 22:28
• The presenter successfully gains RDP access to an internal Windows machine through the proxy tunnel 27:06
Chisel proves to be an efficient tool for pivoting during penetration tests, enabling access to internal networks through compromised systems.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Penetration Testing. Commonly maps to: Security Assessment and Testing, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
when you're performing a penetration test you aren't targeting just one computer you're oftentimes targeting multiple and you need to move across the network do lateral movement and start pivoting to gain further access into the environment but sometimes pivoting can be a little bit hard to do in this video I want to show you some tool that makes it super duper easy and we're going to go into a live show and tell and demo with chisel so I am inside of my Kali Linux virtual machine I'll hit Ctrl alt t on my keyboard to open up a terminal I'll hit f11 to go full screen and I'm going to move into a directory called chisel where I've prepared some things that we can showcase sort of a lab environment to be able to practice and play with chisel I have set this up with SNAP labs and I have a VPN…