Metasploit Revealed: Secrets of the Expert Pentester

Pivoting to internal networks

Metasploit offers features to connect to internal networks through existing meterpreter shells. To achieve this, we need to add a route for the internal network to Metasploit so that it can pivot data coming from our system to the intended hosts in the internal network range. Let us use the post/windows/manage/autoroute module to add internal network routes to Metasploit, as shown in the following screenshot:

Let's set SESSION to 1, as 1 is the session ID of our meterpreter session, and set SUBNET to our desired network range, that is, 172.28.128.0. Let's run the module and analyze the output as follows:

We can ...