A penetration tester has compromised a host within a target network and wants to access an internal web application on a segment not directly reachable from the tester's machine. Which post-exploitation technique enables this access?

Question

Accepted Answer

B. Pivoting using a SOCKS proxy or port forwarding through the compromised host. Pivoting uses the compromised host as a relay point to reach otherwise inaccessible network segments. Tools like Metasploit's route command, SSH port forwarding, or SOCKS proxies established through the compromised host allow the tester to tunnel traffic from their machine through the pivot to reach internal systems.

A penetration tester has compromised a host within a target network and wants to access an internal web application on a segment not directly reachable from the tester's machine. Which post-exploitation technique enables this access?

Related Questions

Discussion