Pivoting and Tunneling

SSH tunneling over SOCKS proxy

$ nmap -sT -p22,3306 10.129.202.64
PORT     STATE  SERVICE
22/tcp   open   ssh
3306/tcp closed mysql

MySQL 並沒有對外開放，若要使用必須透過 port forwarding，可以透過 SSH 將 MySQL 轉到 port 1234 上：

abb00717@ABB00717:~
$ ssh -L 1234:localhost:3306 ubuntu@10.129.202.64

$ netstat -antp | grep 1234
tcp        0      0 127.0.0.1:1234          0.0.0.0:*               LISTEN      4034/ssh            
tcp6       0      0 ::1:1234                :::*                    LISTEN      4034/ssh

abb00717@ABB00717:~
$ nmap -v -sV -p1234 localhost
PORT     STATE SERVICE VERSION
1234/tcp open  mysql   MySQL 8.0.28-0ubuntu0.20.04.3

你可以一次 forward 很多 port：

abb00717@ABB00717:~
$ ssh -L 1234:localhost:3306 -L 8080:localhost:80 ubuntu@10.129.202.64