How To Pivot Through a Network with Chisel 

I am on the same road. helps big-time! Thanks a lot John!

recently I joined the journey. good luck bois

yes but if you don't have ssh access or the password on the compromised machine 😅

​@@corpse307 in a real world scenario you would compromise a web application and get a shell running as the web user. From there you'd try to escalate privileges to root or at least get access to a local account. Then you'd establish persistent access via SSH keys. Chisel is more useful in a scenario where you need to evade a firewall since SSH access is blocked.

@@bufordmaddogtannen I agree but I was thinking in a scenario where the compromised machine has no ssh and no internet access to install it

@@corpse307 you still need some form of access.

I get that SSH is powerful and can do a lot of what Chisel does, but it's not always an option. Not every target system has SSH enabled, and some networks even block or monitor SSH traffic. Chisel can be a lifesaver in those scenarios. Even if the only external-facing machine isn't a web app or doesn't have SSH enabled, having alternative tools like Chisel becomes invaluable. A pentester should always have multiple tools and/or commands that can achieve the same outcome. This is essential in case one method is blocked, doesn't work, or lacks viability in a particular situation. SSH, Chisel, and Ligolo are all tools that fulfill this role, each with its own unique advantages. They all have their places in real-world scenarios.

ssh is not always available

Man! Every htb module i do, i have to go somewhere else for explanations to understand the material.

​@@swagmuffin9000 exactly! i just hate how slow videos can be sometimes. yesterday I just found out microsoft edge has built in chat gpt and text to voice which i will try on htb to learn better maybe it will help

@@KpFriendly haven't tried that yet, hope it works out for you 👍🏻

Same, there's chisel.exe for Windows as well.

use chisel for windows version

He is not bringing up chisel in the local browser. He wants port 80 from the remote browser brought local. That's the 80 reversed to 8000. So he uses 8000 in the local browser to get the remote 80. Hope that makes sense.

Paint?

Good catch -- fixed, thank you!

Search "chisel burp" on google and you'll get it

It probably doesn’t have internet access since it’s a lab machine