GITBOOK-631: change request with no subject merged in GitBook

networking/port-forwarding.md

@@ -2,7 +2,7 @@
 
 ## Proxychains-ng
 
-Version of proxychains that allows to specify different configurations for each connection. Useful for  running multiple proxies on different ports when pivoting through several subnets.
+Version of proxychains that allows to specify different configurations for each connection. Useful for running multiple proxies on different ports when pivoting through several subnets.
 
 ```
 apt-get install proxychains4
@@ -33,6 +33,16 @@ Can also be used to expose services running as localhost on the remote machine t
 ssh -N -R <kali ip>:<kali port>:<target address>:<target port> <kali user>@<kali ip>
 ```
 
+#### Example of exposing services running as localhost
+
+Run the following command on the compromised machine to map the local service port to a new port exposed to the attacker's machine.
+
+```
+ssh -N -R <exposed port>:localhost:<service port> <kali user>@<kali ip>
+```
+
+We can access the exposed service by navigating to the exposed port in our attacker machine. For instance if the exposed service is a web server and the specified exposed port is 8000 we can access the hosted content by navigating to `http://localhost:8000` on the attacker machine
+
 ### Dynamic port forwarding
 
 Set a local listening port and have it tunnel incoming traffic to any remote destination through a proxy. Works the same way as a local port forwarding but allows to target different ports and machines without having to create different tunnels for each host or port.
@@ -87,6 +97,3 @@ socks4 <proxy ip> <port>
 #run commands through proxy
 proxychains <command>
 ```
-
-
-