Question

During an internal engagement you gained a Meterpreter session on a dual-homed Linux host (10.0.10.5). This host also has an interface on 192.168.50.0/24, a subnet your Kali attack box cannot reach directly. You want to run additional Metasploit modules against hosts in the 192.168.50.0/24 range through the compromised host without setting up separate port forwards for each target port. Which action best achieves this?

Accepted Answer

Run 'run autoroute -s 192.168.50.0/24' from the Meterpreter session so subsequent Metasploit modules route through the compromised host

Answer

Add a static route on the Kali box with 'ip route add 192.168.50.0/24 via 10.0.10.5' so traffic reaches the internal subnet

Answer

Use 'portfwd add -l 4444 -p 445 -r 192.168.50.20' to expose the single SMB service you need to reach

Answer

Enable IP forwarding on the compromised host with 'echo 1 > /proc/sys/net/ipv4/ip_forward' and rescan from Kali