Question

During an internal engagement, you have a Meterpreter session on a dual-homed Linux host (10.0.5.20). This host also has an interface on 172.16.30.0/24, a segment your attack machine cannot reach directly. You need to connect your local RDP client to a Windows server at 172.16.30.15 on TCP 3389 through the compromised host. Which action most directly accomplishes this?

Accepted Answer

Run 'portfwd add -l 3389 -p 3389 -r 172.16.30.15' from the Meterpreter session, then point your RDP client at 127.0.0.1:3389

Answer

Add a static route on your attack machine to 172.16.30.0/24 via 10.0.5.20 using the OS route command

Answer

Run 'run autoroute -s 172.16.30.0/24' and connect your RDP client directly to 172.16.30.15

Answer

Start an ARP spoofing module on 10.0.5.20 to redirect 172.16.30.15 traffic back to your attack machine