{"id":795,"date":"2013-08-01T00:00:00","date_gmt":"1999-01-01T00:00:00","guid":{"rendered":"https:\/\/fir3netwp.gmsrrpobkbd.com\/?p=795"},"modified":"2023-02-04T01:50:16","modified_gmt":"2023-02-04T01:50:16","slug":"vpn-pivoting-explained","status":"publish","type":"post","link":"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html","title":{"rendered":"VPN Pivoting Explained"},"content":{"rendered":"<p>By: Ayman Hammoudeh<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_65 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<p class=\"ez-toc-title\">Table of Contents<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-66328262ebdc1\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-66328262ebdc1\"  aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html\/#Introduction\" title=\"Introduction\">Introduction<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html\/#What_is_Cobalt_Strike_and_What_does_it_add_to_Armitage\" title=\"What is Cobalt Strike and What does it add to Armitage?\">What is Cobalt Strike and What does it add to Armitage?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html\/#Covert_VPN\" title=\"Covert VPN\">Covert VPN<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html\/#How_to_Deploy\" title=\"How to Deploy\">How to Deploy<\/a><ul class='ez-toc-list-level-4' ><li class='ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html\/#Deploy_VPN\" title=\"Deploy VPN\">Deploy VPN<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html\/#Manage_Interfaces\" title=\"Manage Interfaces\">Manage Interfaces<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html\/#Configure_an_Interface\" title=\"Configure an Interface\">Configure an Interface<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html\/#VPN_Interface_Setup\" title=\"VPN Interface Setup\">VPN Interface Setup<\/a><\/li><\/ul><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html\/#Conclusion\" title=\"Conclusion\">Conclusion<\/a><\/li><\/ul><\/nav><\/div>\n<h2 class=\"h3\"><span class=\"ez-toc-section\" id=\"Introduction\"><\/span><strong>Introduction<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><strong>Pivoting<\/strong> refers to method used by penetration testers that uses compromised systems to attack other systems on the same network to avoid restrictions such as firewall configurations, which may prohibit direct access to all machines. For example, an attacker compromises a web server on a corporate network; the attacker can then use the compromised web server to attack other systems on the network.<\/p>\n<p>These types of attacks are often called multi-layered attacks. Pivoting is also known as island hopping.<\/p>\n<p>Pivoting can further be distinguished into proxy pivoting and VPN pivoting:<\/p>\n<p>&#8211;\u00a0\u00a0 \u00a0<strong>Proxy pivoting<\/strong> generally describes the practice of channeling traffic through a compromised target using a proxy payload on the machine and launching attacks from this computer. This type of pivoting is restricted to certain TCP and UDP ports that are supported by the proxy. We will explore proxy pivoting techniques in a future article.<\/p>\n<p>&#8211;\u00a0\u00a0 \u00a0<strong>VPN pivoting<\/strong> enables the attacker to create an encrypted layer 2 tunnel into the compromised machine to route network traffic through that target machine. This is done in order to run a vulnerability scan on the internal network through the compromised machine, effectively giving the attacker full network access as if they were behind the firewall.<\/p>\n<p>Typically, the proxy or VPN applications enabling pivoting are executed on the target computer as the <a href=\"http:\/\/en.wikipedia.org\/wiki\/Payload_(software)\">payload (software) <\/a>of an exploit.<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>Once you\u2019re inside a network, there is a lot more you can do. You can sniff traffic and attempt to capture information that way. You can host a rogue smb server and use it to capture or relay the credentials of any system that touches your server. There\u2019s a lot of opportunities that then open up.<\/p>\n<p>Unfortunately, these opportunities require being inside the network with Layer 2 access, as if your system is plugged into that network.<\/p>\n<h2 class=\"h3\"><span class=\"ez-toc-section\" id=\"What_is_Cobalt_Strike_and_What_does_it_add_to_Armitage\"><\/span><strong>What is Cobalt Strike and <a href=\"http:\/\/www.advancedpentest.com\/help-armitage-vs-cobaltstrike\">What does it add to Armitage?<\/a><\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><a href=\"http:\/\/www.advancedpentest.com\/\">Cobalt Strike<\/a> is a <a href=\"http:\/\/www.infosecinstitute.com\/courses\/penetration_testing_online.html\" class=\"broken_link\">penetration testing<\/a> software designed to execute targeted attacks.<\/p>\n<p>Cobalt Strike adds <a href=\"http:\/\/www.youtube.com\/watch?feature=player_embedded&amp;v=S_ejYRTM8J0\">social engineering<\/a> features to get a foothold, covert command and control with <a href=\"http:\/\/www.advancedpentest.com\/help-beacon\">Beacon<\/a>, <a href=\"http:\/\/www.advancedpentest.com\/help-covert-vpn\">VPN pivoting<\/a>, and <a href=\"http:\/\/www.advancedpentest.com\/downloads\/reports\/hosts_report.pdf\">reporting<\/a> to Armitage\u2019s existing post-exploitation and team collaboration capabilities.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Covert_VPN\"><\/span><strong>Covert VPN<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Cover VPN bridges you into your targets network by using a compromised Windows workstation as a hop point.<\/p>\n<p>How does it work? Think of it as a two-way packet sniffer. Covert VPN sets up a network interface on your attacker system. Anything that passes through this interface is dumped as-is on your targets network. On the compromised host, acting as a relay, any frames it sees are made available to the network interface created by Covert VPN.<\/p>\n<p>The covert part of Covert VPN is the ability to choose how it relays traffic back and forth. You can relay frames using a UDP transport. This is fast and works like a traditional VPN. You can relay frames using a reverse TCP connection. Or you can relay frames as HTTP, GET, and POST requests. This last option is useful if the only way out of a network is through a proxy server. None of these options is very quiet though, as a VPN is always chatty.<br \/>\nWith Covert VPN, you have the option to bring other tools into your engagement. You\u2019re now in the target\u2019s network and can do what you need to do.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"How_to_Deploy\"><\/span><strong>How to Deploy<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>To activate Covert VPN, right click a compromised host, go to <strong>Meterpreter -&gt;Pivoting -&gt;Deploy VPN<\/strong>. Select the remote interface you would like Covert VPN to bind to. If no local interface is present, press <strong>Add<\/strong> to create one.<\/p>\n<p><strong><picture><source srcset=\"https:\/\/www.fir3net.com\/wp-content\/uploads\/2013\/08\/images_legacy_vpn-piv2a.avif 662w,https:\/\/www.fir3net.com\/wp-content\/uploads\/2013\/08\/images_legacy_vpn-piv2a-300x155.avif 300w\" sizes=\"(max-width: 662px) 100vw, 662px\" type=\"image\/avif\"><source srcset=\"https:\/\/www.fir3net.com\/wp-content\/uploads\/2013\/08\/images_legacy_vpn-piv2a.webp 662w,https:\/\/www.fir3net.com\/wp-content\/uploads\/2013\/08\/images_legacy_vpn-piv2a-300x155.webp 300w\" sizes=\"(max-width: 662px) 100vw, 662px\" type=\"image\/webp\"><img src=\"https:\/\/www.fir3net.com\/wp-content\/uploads\/2013\/08\/images_legacy_vpn-piv2a.png\" height=\"342\" width=\"662\" srcset=\"https:\/\/www.fir3net.com\/wp-content\/uploads\/2013\/08\/images_legacy_vpn-piv2a.png 662w, https:\/\/www.fir3net.com\/wp-content\/uploads\/2013\/08\/images_legacy_vpn-piv2a-300x155.png 300w\" sizes=\"(max-width: 662px) 100vw, 662px\" class=\"alignnone wp-image-793 size-full sp-no-webp\" alt=\"Deploy VPN Client\" loading=\"lazy\" decoding=\"async\" style=\"display: block; margin-left: auto; margin-right: auto;\"  > <\/picture><\/strong><strong>\u00a0<\/strong><\/p>\n<h4><span class=\"ez-toc-section\" id=\"Deploy_VPN\"><\/span><strong>Deploy VPN<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p>Check <strong>Clone host MAC address<\/strong> to make your local interface have the same MAC address as the remote interface. It\u2019s recommended to leave this option checked.<\/p>\n<p>Select Inject VPN client into memory to deploy Covert VPN directly into memory. If this box is not checked, Cobalt Strike will upload and execute the Covert VPN client for you. The \u2018inject into memory\u2019 option does not work reliably on Windows Vista, Windows 7, or 64-bit Windows XP.<\/p>\n<p>Press <strong>Deploy<\/strong> to start the Covert VPN client on the target. Covert VPN requires SYSTEM access to deploy.<\/p>\n<p>Once a Covert VPN interface is active, you may use it like any physical interface on your system. Use ifconfig to configure its IP address. If your target <a href=\"http:\/\/www.intenseschool.com\/boot_camp\/cisco\/ccna\" class=\"broken_link\">network<\/a> has a DHCP server, you may request an IP address from it using your operating system\u2019s built-in tools.<\/p>\n<h4><span class=\"ez-toc-section\" id=\"Manage_Interfaces\"><\/span><strong>Manage Interfaces<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p>To manage your Covert VPN interfaces, go to <strong>Cobalt Strike -&gt;Interfaces<\/strong>. Here, Cobalt Strike will show the Covert VPN interfaces, how they\u2019re configured, and how many bytes were transmitted and received through each interface.<\/p>\n<p>Highlight an interface and press <strong>remove<\/strong> to destroy the interface and close the remote Covert VPN client. Covert VPN will remove its temporary files on reboot and it automatically undoes any system changes right away.<\/p>\n<p>Press <strong>Add<\/strong> to configure a new Covert VPN interface.<\/p>\n<h4><span class=\"ez-toc-section\" id=\"Configure_an_Interface\"><\/span><strong>Configure an Interface<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p>The Covert VPN interfaces consists of a network tap and a channel to communicate ethernet frames through. To configure the interface, choose an Interface name (this is what you will manipulate through ifconfig later) and a MAC address.<br \/>\n<picture><source srcset=\"https:\/\/www.fir3net.com\/wp-content\/uploads\/2013\/08\/images_legacy_vpn-piv3.avif 609w,https:\/\/www.fir3net.com\/wp-content\/uploads\/2013\/08\/images_legacy_vpn-piv3-300x177.avif 300w\" sizes=\"(max-width: 609px) 100vw, 609px\" type=\"image\/avif\"><source srcset=\"https:\/\/www.fir3net.com\/wp-content\/uploads\/2013\/08\/images_legacy_vpn-piv3.webp 609w,https:\/\/www.fir3net.com\/wp-content\/uploads\/2013\/08\/images_legacy_vpn-piv3-300x177.webp 300w\" sizes=\"(max-width: 609px) 100vw, 609px\" type=\"image\/webp\"><img src=\"https:\/\/www.fir3net.com\/wp-content\/uploads\/2013\/08\/images_legacy_vpn-piv3.png\" height=\"359\" width=\"609\" srcset=\"https:\/\/www.fir3net.com\/wp-content\/uploads\/2013\/08\/images_legacy_vpn-piv3.png 609w, https:\/\/www.fir3net.com\/wp-content\/uploads\/2013\/08\/images_legacy_vpn-piv3-300x177.png 300w\" sizes=\"(max-width: 609px) 100vw, 609px\" class=\"alignnone wp-image-794 size-full sp-no-webp\" alt=\"Setup Interface\" loading=\"lazy\" decoding=\"async\" style=\"display: block; margin-left: auto; margin-right: auto;\"  > <\/picture><\/p>\n<p>&nbsp;<\/p>\n<h4><span class=\"ez-toc-section\" id=\"VPN_Interface_Setup\"><\/span><strong>VPN Interface Setup<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p>You must also configure the Covert VPN communication channel for your interface. Covert VPN may communicate Ethernet frames over a UDP connection, TCP connection, or using the HTTP protocol. Cobalt Strike will setup and manage a server to receive a connection from the Covert VPN client based on the Local Port and Channel you select.<\/p>\n<p>The Covert VPN HTTP channel makes use of the Cobalt Strike web server. You may host other Cobalt Strike web applications and multiple Covert VPN HTTP channels on the same port.<\/p>\n<p>For best performance, use the UDP channel. The UDP channel has the least amount of overhead compared to the TCP and HTTP channels. Use the HTTP channel if you need to get past a restrictive firewall.<\/p>\n<p>While Covert VPN has a flexibility advantage, your use of a VPN pivot over a proxy pivot depends on the situation. Covert VPN requires SYSTEM access while a proxy pivot does not.<\/p>\n<p>Covert VPN creates a new communication channel while a proxy pivot, once again, does not. You should use a proxy pivot initially and move to a VPN pivot when it\u2019s needed.<\/p>\n<h2 class=\"h3\"><span class=\"ez-toc-section\" id=\"Conclusion\"><\/span><strong>Conclusion<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The role of VPN pivoting is to pivot to other machines and network segments until they reach the domain controller. It\u2019s the same concept as a frog trying to cross a pond by jumping from lily pad to lily pad.<br \/>\nYou can deploy VPN pivots using <a href=\"http:\/\/resources.infosecinstitute.com\/phishing-and-social-engineering-techniques\/\">social engineering<\/a> attacks, such as email attachments and USB thumb-drives.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>By: Ayman Hammoudeh Introduction Pivoting refers to method used by penetration testers that uses compromised systems to attack other systems on the same network to avoid restrictions such as firewall configurations, which may prohibit direct access to all machines. For example, an attacker compromises a web server on a corporate network; the attacker can then &#8230; <a title=\"VPN Pivoting Explained\" class=\"read-more\" href=\"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html\" aria-label=\"Read more about VPN Pivoting Explained\">Read more<\/a><\/p>\n","protected":false},"author":2,"featured_media":792,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[25],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.6 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>VPN Pivoting Explained - Fir3net<\/title>\n<meta name=\"description\" content=\"By: Ayman Hammoudeh Introduction Pivoting refers to method used by penetration testers that uses compromised systems to attack other systems on the same\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"VPN Pivoting Explained - Fir3net\" \/>\n<meta property=\"og:description\" content=\"By: Ayman Hammoudeh Introduction Pivoting refers to method used by penetration testers that uses compromised systems to attack other systems on the same\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html\" \/>\n<meta property=\"og:site_name\" content=\"Fir3net\" \/>\n<meta property=\"article:published_time\" content=\"1999-01-01T00:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-02-04T01:50:16+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.fir3net.com\/wp-content\/uploads\/2013\/08\/images_legacy_vpn-piv1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"665\" \/>\n\t<meta property=\"og:image:height\" content=\"244\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Rick Donato\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Rick Donato\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html\"},\"author\":{\"name\":\"Rick Donato\",\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/person\/ab35009601b7687ee1c5310be6038037\"},\"headline\":\"VPN Pivoting Explained\",\"datePublished\":\"1999-01-01T00:00:00+00:00\",\"dateModified\":\"2023-02-04T01:50:16+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html\"},\"wordCount\":1117,\"publisher\":{\"@id\":\"https:\/\/www.fir3net.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.fir3net.com\/wp-content\/uploads\/2013\/08\/images_legacy_vpn-piv1.jpg\",\"articleSection\":[\"Security Concepts\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html\",\"url\":\"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html\",\"name\":\"VPN Pivoting Explained - Fir3net\",\"isPartOf\":{\"@id\":\"https:\/\/www.fir3net.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.fir3net.com\/wp-content\/uploads\/2013\/08\/images_legacy_vpn-piv1.jpg\",\"datePublished\":\"1999-01-01T00:00:00+00:00\",\"dateModified\":\"2023-02-04T01:50:16+00:00\",\"description\":\"By: Ayman Hammoudeh Introduction Pivoting refers to method used by penetration testers that uses compromised systems to attack other systems on the same\",\"breadcrumb\":{\"@id\":\"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html#primaryimage\",\"url\":\"https:\/\/www.fir3net.com\/wp-content\/uploads\/2013\/08\/images_legacy_vpn-piv1.jpg\",\"contentUrl\":\"https:\/\/www.fir3net.com\/wp-content\/uploads\/2013\/08\/images_legacy_vpn-piv1.jpg\",\"width\":665,\"height\":244},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.fir3net.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security\",\"item\":\"https:\/\/www.fir3net.com\/security\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Security Concepts\",\"item\":\"https:\/\/www.fir3net.com\/security\/concepts-security\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"VPN Pivoting Explained\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.fir3net.com\/#website\",\"url\":\"https:\/\/www.fir3net.com\/\",\"name\":\"Fir3net\",\"description\":\"Keeping you in the know\",\"publisher\":{\"@id\":\"https:\/\/www.fir3net.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.fir3net.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.fir3net.com\/#organization\",\"name\":\"Fir3net\",\"url\":\"https:\/\/www.fir3net.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.fir3net.com\/wp-content\/uploads\/Fir3net-Background-Logo-compressed.png\",\"contentUrl\":\"https:\/\/www.fir3net.com\/wp-content\/uploads\/Fir3net-Background-Logo-compressed.png\",\"width\":390,\"height\":88,\"caption\":\"Fir3net\"},\"image\":{\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/person\/ab35009601b7687ee1c5310be6038037\",\"name\":\"Rick Donato\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d75d69a54c0ca3b32c24c3a9703b623c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d75d69a54c0ca3b32c24c3a9703b623c?s=96&d=mm&r=g\",\"caption\":\"Rick Donato\"},\"description\":\"Rick Donato is a Network Automation Architect\/Evangelist and the founder of Packet Coders.\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"VPN Pivoting Explained - Fir3net","description":"By: Ayman Hammoudeh Introduction Pivoting refers to method used by penetration testers that uses compromised systems to attack other systems on the same","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html","og_locale":"en_US","og_type":"article","og_title":"VPN Pivoting Explained - Fir3net","og_description":"By: Ayman Hammoudeh Introduction Pivoting refers to method used by penetration testers that uses compromised systems to attack other systems on the same","og_url":"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html","og_site_name":"Fir3net","article_published_time":"1999-01-01T00:00:00+00:00","article_modified_time":"2023-02-04T01:50:16+00:00","og_image":[{"width":665,"height":244,"type":"image\/jpeg","url":"https:\/\/www.fir3net.com\/wp-content\/uploads\/2013\/08\/images_legacy_vpn-piv1.jpg"}],"author":"Rick Donato","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Rick Donato","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html#article","isPartOf":{"@id":"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html"},"author":{"name":"Rick Donato","@id":"https:\/\/www.fir3net.com\/#\/schema\/person\/ab35009601b7687ee1c5310be6038037"},"headline":"VPN Pivoting Explained","datePublished":"1999-01-01T00:00:00+00:00","dateModified":"2023-02-04T01:50:16+00:00","mainEntityOfPage":{"@id":"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html"},"wordCount":1117,"publisher":{"@id":"https:\/\/www.fir3net.com\/#organization"},"image":{"@id":"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html#primaryimage"},"thumbnailUrl":"https:\/\/www.fir3net.com\/wp-content\/uploads\/2013\/08\/images_legacy_vpn-piv1.jpg","articleSection":["Security Concepts"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html","url":"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html","name":"VPN Pivoting Explained - Fir3net","isPartOf":{"@id":"https:\/\/www.fir3net.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html#primaryimage"},"image":{"@id":"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html#primaryimage"},"thumbnailUrl":"https:\/\/www.fir3net.com\/wp-content\/uploads\/2013\/08\/images_legacy_vpn-piv1.jpg","datePublished":"1999-01-01T00:00:00+00:00","dateModified":"2023-02-04T01:50:16+00:00","description":"By: Ayman Hammoudeh Introduction Pivoting refers to method used by penetration testers that uses compromised systems to attack other systems on the same","breadcrumb":{"@id":"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html#primaryimage","url":"https:\/\/www.fir3net.com\/wp-content\/uploads\/2013\/08\/images_legacy_vpn-piv1.jpg","contentUrl":"https:\/\/www.fir3net.com\/wp-content\/uploads\/2013\/08\/images_legacy_vpn-piv1.jpg","width":665,"height":244},{"@type":"BreadcrumbList","@id":"https:\/\/www.fir3net.com\/security\/concepts-and-terminology-security\/vpn-pivoting-explained.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.fir3net.com\/"},{"@type":"ListItem","position":2,"name":"Security","item":"https:\/\/www.fir3net.com\/security"},{"@type":"ListItem","position":3,"name":"Security Concepts","item":"https:\/\/www.fir3net.com\/security\/concepts-security"},{"@type":"ListItem","position":4,"name":"VPN Pivoting Explained"}]},{"@type":"WebSite","@id":"https:\/\/www.fir3net.com\/#website","url":"https:\/\/www.fir3net.com\/","name":"Fir3net","description":"Keeping you in the know","publisher":{"@id":"https:\/\/www.fir3net.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.fir3net.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.fir3net.com\/#organization","name":"Fir3net","url":"https:\/\/www.fir3net.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.fir3net.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.fir3net.com\/wp-content\/uploads\/Fir3net-Background-Logo-compressed.png","contentUrl":"https:\/\/www.fir3net.com\/wp-content\/uploads\/Fir3net-Background-Logo-compressed.png","width":390,"height":88,"caption":"Fir3net"},"image":{"@id":"https:\/\/www.fir3net.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.fir3net.com\/#\/schema\/person\/ab35009601b7687ee1c5310be6038037","name":"Rick Donato","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.fir3net.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/d75d69a54c0ca3b32c24c3a9703b623c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d75d69a54c0ca3b32c24c3a9703b623c?s=96&d=mm&r=g","caption":"Rick Donato"},"description":"Rick Donato is a Network Automation Architect\/Evangelist and the founder of Packet Coders."}]}},"_links":{"self":[{"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/posts\/795"}],"collection":[{"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/comments?post=795"}],"version-history":[{"count":1,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/posts\/795\/revisions"}],"predecessor-version":[{"id":3585,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/posts\/795\/revisions\/3585"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/media\/792"}],"wp:attachment":[{"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/media?parent=795"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/categories?post=795"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/tags?post=795"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}