Hands-On Red Team Tactics

Meterpreter port forwarding

Meterpreter also has a built-in feature which allows direct access to the systems/services inside the network which are otherwise unreachable. The main difference between this and SSH tunneling is that SSH tunneling uses RSA encryption, whereas Meterpreter port forwarding happens over TLS.

Let's look at an example of port forwarding using Meterpreter. The command used for port forwarding using Meterpreter is portfwd. To view the options of the command, you can type portfwd --help into Meterpreter:

In this example, we have access to a host, as shown in the following screenshot:

We can now access the Meterpreter ...