PIVOTING

Chisel

Reverse

client:

chisel client <ip-server>:<port-server> R:0.0.0.0:3001:socks

server:

chisel server -p <port-server> --reverse

Forward

chisel server -p <your-port> --reverse

inermediate host

chisel client <your-ip>:<your-port> <inter-ip>:<inter-port>:<your-ip>:<your-port>

destination host

./chisel client <inter-ip>:<inter-port> R:14999:socks

Tun2socks

Linux

Create interface:

$ sudo ip tuntap add mode tun dev t2s
$ sudo ip a add 10.0.0.0/8 dev t2s # target network (behind socks host)
$ sudo ip l set up dev t2s

Start tun2socks:

$ sudo tun2socks -proxy socks5://127.0.0.1:1080 -device tun://t2s

Redact dns for interface (systemd-resolved):

$ sudo resolvectl dns l 10.1.2.1 10.1.3.1 # dns servers
$ sudo resolvectl mdns l yes # allow TCP
$ sudo resolvectl domain l test.com # resolve domain, same as search

Check configure:

$ resolvectl status
...
Link 3 (t2s)
    Current Scopes: DNS LLMNR/IPv4 LLMNR/IPv6 mDNS/IPv4 mDNS/IPv6
         Protocols: +DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
Current DNS Server: 10.1.2.1
       DNS Servers: 10.1.3.1
        DNS Domain: test.com
...

Windows

Download https://www.wintun.net/, locate to C:\Windows\system32 wintun.dll

tun2socks-windows-amd64.exe -device tun://t2s -proxy socks5://127.0.0.1:1080

Next need add routes to created interface

$ netsh interface ip set address name="t2s" static 127.254.254.1 255.255.255.255
$ route add 10.0.0.0 mask 255.0.0.0 127.254.254.1

Optional configure dns

$ netsh interface ip set dns "t2s" static 1.1.1.1
$ Set-Service -Name "dnscache" -StartupType Automatic
$ Start-Service "dnscache"

Macos

sudo tun2socks -device utun1337 -proxy socks5://127.0.0.1:9090 -interface en0
# target network (behind socks host)
sudo ifconfig utun1337 198.18.0.1 198.18.0.1 up
sudo route -nv add -net 10.119.11.128/26 -interface utun1337
# check routes
netstat -rn -f inet | grep utun1337

GOST

Forward traffic from local 2222 port to external address with port 80

gost -L=tcp://0.0.0.0:2222/10.10.16.140:80

rdp2tcp

Туннелирование трафика через RDP-соединениеХабр