Port forwarding summary

Port forwarding , It is also called port bounce , It's simple , Sum up 10 Port forwarding tips , In fact, that is A Access to B,B Access to C, however A Cannot access C, Port forwarding is to let A Access to C, An inappropriate example ：

scene ： Xiaohei can access and control the springboard , The springboard can access mobile phones
test ： Please help Xiao Hei to access his mobile phone directly

We found that , except SSH Local forwarding operates locally , other 9 Port forwarding is operated on the springboard , So remember , Port forwarding usually occurs on the springboard , From the perspective of security events , The springboard machine is the lost host , We need to focus on the investigation ～

• ailx10：SSH Local port forwarding

1、 Operate locally 
2、ssh -CfNg -L < Local port >:< The victim IP>:< Victim port > < Springboard machine SSH>
3、 Access the local port 

• ailx10：SSH Remote port forwarding

1、 Operate on the springboard machine 
2、ssh -CfNg -R < Springboard port >:< The victim IP>:< Victim port > < Local SSH>
3、 Access gangplank port 

• ailx10： Port forwarding tool rinetd

1、 Operate on the springboard machine 
2、0.0.0.0 < Springboard port > < The victim IP> < Victim port >
3、rinetd -c /etc/rinetd.conf
4、 Access gangplank port 

• ailx10：iptables Port forwarding

1、 Operate on the springboard machine 
2、iptables -t nat -A PREROUTING -p tcp --dport < Springboard port > -j DNAT --to-destination < The victim IP>:< Victim port >
3、iptables -t nat -A POSTROUTING -p tcp -d < The victim IP>> --dport < Victim port > -j SNAT --to-source < Springboard machine IP>
4、 Access gangplank port 

• ailx10：firewall Port forwarding

1、 Operate on the springboard machine 
2、firewall-cmd --permanent --add-forward-port=port=< Springboard port >:proto=tcp:toaddr=< The victim IP>:toport=< Victim port >
3、firewall-cmd --reload
4、 Access gangplank port 

• ailx10：ufw Port forwarding

1、 Operate on the springboard machine 
2、-A PREROUTING -p tcp --dport < Springboard port > -j DNAT --to-destination < The victim IP>:< Victim port >
3、-A POSTROUTING -p tcp -d < The victim IP> --dport < Victim port > -j SNAT --to-source < Springboard machine IP>
4、 Access gangplank port 

• ailx10：nc Port forwarding

1、 Operate on the springboard machine 
2、nc -lp < Springboard port > -c "nc < The victim IP> < Victim port >"
3、 Access gangplank port 

• ailx10：socat Port forwarding

1、 Operate on the springboard machine 
2、socat TCP-LISTEN:< Springboard port >,reuseaddr,fork TCP:< The victim IP>:< Victim port >
3、 Access gangplank port 

• ailx10：portmap Port forwarding

1、 Operate on the springboard machine 
2、./portmap -m 1 -p1 < Springboard port > -h2 < The victim IP> -p2 < Victim port >
3、 Access gangplank port 

• ailx10：NATBypass Port forwarding

1、 Operate on the springboard machine 
2、./nb -tran < Springboard port > < The victim IP>:< Victim port >
3、 Access gangplank port 

Network security has a long way to go , Wash and sleep ～