SSH Dynamic Forwarding (SOCKS pivot)
network · medium · +45 XP
Target
GET /api/lab/ssh-tunnel-101/topology (3 hosts: attacker → bastion → db)
POST /api/lab/ssh-tunnel-101/tunnel body {type:'dynamic'|'local'|'remote', listen, target?}
POST /api/lab/ssh-tunnel-101/probe body {via, target_host, target_port}
Goal: open a dynamic forward on the bastion (listen on the attacker), then /probe the internal DB 10.0.0.50:3306 through the SOCKS proxy. Successful probe returns the flag.
// AI hint · first is free · then 1 credit or 5 XP
// attack console
/api/lab/ssh-tunnel-101/
// reuse on the cli
// submit flag
| # | hacker | solved |
|---|---|---|
| 1 | @akadee380 first blood | 2026-09-21 |
8 of 12 · network