Using Sshuttle to Pivot Across Networks

A common problem when attacking a network is pivoting to an internal network once an external-facing machine has been compromised. Sshuttle makes this easy to do across a Linux machine that accepts SSH connections.

If you found this video helpful and would like to support future creations, please considering visiting the following links:

[Zen_Monkey]

I'm in the middle of an exam and hadn't done much pivoting, this video got me working perfectly. Thanks!

[gustanini]

Thank you for this. I am 99% on my OSCP journey but was having trouble doing this technique using chisel. Blessings

[JustMakeIt_YT]

This is a great video - covers the topic in detail, but short and to the point. Great speaking skills too. 10/10!

[Jesse_Johnson]

Killer. No bs. Technical yet super easy to follow.

[unknown_exploit]

Excellent video thank you so much Conda 😁!!

[sappi_]

what if the edge machine only can be logged in through rsa key?

[sssy]

I managed to access a license server from a different network by using this method. Thanks for uploading this demo. It's super helpful!

[Cossaw]

Just found this channel. Very useful stuff. I like the structure of your channel too! I'll be learning a lot from you the next few following days :)

[andyli]

Nice video, saved my ass in the OSCP labs

[NewTubersChannel]

I don't know jack about this stuff, but you do a great job explaining

[jaylal]

Very good video, it now looks so simple to use!

[pentestsky]

this was amazing means how you describe all the things are beyond the point, keep it up

[gowthamnaiduponnana]

Great tool explained easily... thanks sir ..helpful in getting certs

[iakashx]

What to do in case when there is not SSH in Edge Machine. But SSH is possible in Internal Network.
I am stuck in this situation. I am able to access the Edge Machine by os-command execution reverse shell / nc reverse shell.

[jacobnapkins]

Great great stuff man we need more stuff like this

[ayodub]

Thanks, another great video. sshuttle seems so simple compared to proxychains. What can proxychains do that sshuttle can't?

[hewfrebie]

I have a question can I do it with MITM program like ettercap using sshuttle because it requires a network interface to let the victim which is a VPN client and the attacker as VPN server. This feature was only included in Cobalt Strike and Metasploit Pro. I've seen PPTP VPN PoC metasploit video and it was possible but I wonder if it's going to work with IPSec/IKEv2 and sshuttle. I like the video so this what's in my mind like how an attacker will configure a target's machine to pivot and sniff the network with external MITM tools.

[gowthamnaiduponnana]

Sir can u tell me how to transer tools and other things to victim machine using this tool

[sudonoodle]

Wow - this was such a fantastic video. Were you following a script? You speak really clear and well! Absolutely fantastic! I will be using this straight away to pivot around the OSCP labs. Any more OSCP related videos soon? Would love to see some more reporting related videos. Thanks so much!

[thenetworkoddmin]

Hi Conda, I found this vid very helpful but unfortunately when Im trying to do it I have this errors

Traceback (most recent call last):
File "<string>", line 1, in ?
File "assembler.py", line 27, in ?
File "sshuttle.helpers", line 97
except OSError as e:
^
SyntaxError: invalid syntax
c : fatal: c : server died with error code 1


---

here is my syntax