Nine Years of Service
Posts: 129
Threads: 13
Pivoting? 01-04-2017, 07:36 PM
#1
I hear that with access to a low level or insecure device on a network, you can pivot over and have access to a much more secure machine (i.e. server). How exactly does this work?
"The more we learn, the more we realise how little we actually know"
•
Ten Years of Service
Posts: 1,917
Threads: 64
RE: Pivoting? 01-04-2017, 07:45 PM
#2
Let's say you have a "SMART Fridge" and a server on the same network.
The fridge has a telnet listener on the internet so you can reach the fridge from the internet.
The server has a HTTP listener that listens for internet connections and a SSH listener witch listens for connections only from the local network.
You can't reach the servers SSH port because it's listening for local connections, but what you can do is hack the fridge. You hack the fridge and now you are on the same network as the server so using the fridge as a proxy you can now reach the SSH server.
I hope this makes sense...
•
Thirteen Years of Service
Posts: 2,175
Threads: 47
RE: Pivoting? 01-06-2017, 08:22 PM
#7
You're at the grocery store and you can't remember if you have any milk left or you need to buy another gallon. You telnet into your fridge and you input the command to check for milk. Even more detailed, you check for weight of current milk to see if it's almost empty.
"If you look for the light, you can often find it. But if you look for the dark, that is all you will ever see.”
•